fix(wireguard): поддержать IPv6 и исключить выключенные серверы

2026-10-11 22:08:10 +07:00
1 parent f3cbc32720
commit 4d3cb659c1
@@ -1,6 +1,6 @@
 # UX/UI: протокол внешней приёмки 12.5

-Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
+Актуальное продолжение 2026-10-11: завершён12.5.152 — WireGuard IPv6 static lifecycle/create/PATCH/history/delete и single-address RSC/conf export/import.29 real API cases, native handshake/Ping3/3×2,33 disabled-server API/SQL cases всех трёх типов с zero ROS contacts,56 backend tests/профили GRE и контейнеров/live maps,10 E2E/types/ESLint/builds/984 parity/live PC/mobile passed. Runtime backend/frontend ux-wg152 healthy;12.5 открыт. Следующий153 — OSPF/BFD sustained gate: BFD-only loss при сохранённых OSPF Hello на собственных GRE, восстановление и independent cleanup.

 IPsec78: реальный PSK responder established, mode-config198.18.78.10 и online=true подтверждены API; точные собственные объекты удалены. Сертификатный/DN online, late failure и history restore остаются открытыми. [Отчёт](ux-ui/acceptance/ipsec-mode-config-2026-10-09.json), [журнал](ux-ui-progress.md).

@@ -696,7 +696,7 @@ flowchart LR

 ## 12.5.77 — основной блок IPsec (2026-10-09)

-Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
+Актуальное продолжение 2026-10-11: завершён12.5.152 — WireGuard IPv6 static lifecycle/create/PATCH/history/delete и single-address RSC/conf export/import.29 real API cases, native handshake/Ping3/3×2,33 disabled-server API/SQL cases всех трёх типов с zero ROS contacts,56 backend tests/профили GRE и контейнеров/live maps,10 E2E/types/ESLint/builds/984 parity/live PC/mobile passed. Runtime backend/frontend ux-wg152 healthy;12.5 открыт. Следующий153 — OSPF/BFD sustained gate: BFD-only loss при сохранённых OSPF Hello на собственных GRE, восстановление и independent cleanup.

 Подробный объём, протоколы, схема и ограничения: [12.5.77 в журнале](ux-ui-progress.md).

@@ -1649,3 +1649,23 @@ Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address п
 Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).

 Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
+
+## 12.5.152 — IPv6 lifecycle WireGuard и общий допуск выключенных серверов (2026-10-11)
+
+WireGuard читает оба address catalogs; ошибки/не-массивы не превращаются в пустые данные. Catalog показывает активный статический адрес, новые snapshots сохраняют все статические адреса с disabled/advertise/comment/no-dad. Dynamic link-local исключён из управления. Create и PATCH address, history restore и delete выбирают семейство по CIDR; дополнительные адреса сохранены, legacy snapshot с несколькими текущими адресами409. Общий адресный planner переиспользован GRE/WireGuard; constructor alias GreRestoreConflict совместим. PATCH не переименовывает одновременно интерфейс и адрес.
+
+Import подтверждает receipts в /ip/address и /ipv6/address раздельно, normalized IPv6 identities принимаются, automatic link-local не считается чужим static child. Lost/unconfirmed receipt не разрешает удаление по одному имени; rollback не удаляет IPv4 с совпавшим IPv6 ID. IPv6 RSC export использует /ipv6 address add +advertise=no, parser распознаёт IPv6 address line. Multiple/special address import и export явно отклоняются вместо тихой потери данных. Это single-address literal import/export, не произвольный RouterOS configuration codec. Существующий ReUI create sheet получил подсказку IPv4/IPv6; структура/Frame/base-nova сохранены.
+
+При native приёмке обнаружено: getEnabledServerById ранее проверял только ID. Теперь общий getter допускает только enabled=true и полный корректный DB ID; WireGuard selected catalog также исключает disabled. Это влияет на использующих getter GRE/WireGuard/firewall/containers/traffic/overlay. Постоянный opt-in test network-disabled-server.test.ts делает33 API/SQL cases: три типа Home Router/Jump Host/Exit Node ×11 calls, factory любого ROS client запрещена, contacts=0, enabled positive control проходит.8 malformed IDs проверяются до SQL, включая unsafe/выход за integer DB range. Без MMAPP_OWN_TEST_DB SQL часть честно skipped; в собственном PG стенде выполнена и база удалена.
+
+Проверки:56 node:test cases import/rollback/revision/delete, service/config/HTTP scripts, GRE config-sync и14 invalid GRE requests, containers/live-maps profiles;10 E2E (WireGuard IPv6/error-retained input PC/mobile, tables/menus и GRE smoke после общего planner), source types/ESLint; обе production сборки,984 emitted outputs совпали с окончательным backend.
+
+Native изолированная PG + production handlers + оба CHR:29 API cases, native handshake0s и Ping3/3 в обе стороны после IPv6 invalid=false; create/PATCH/IPv6→IPv4/clear, multiple-address history restore, legacy409, export multiple409, RSC/conf single IPv6 export и реальный import/delete, disabled GET empty/PATCH404 с forbidden factory. После каждого запуска9 static collections×2 совпали, собственные интерфейсы/peers/адреса и PG базы удалены. Native source/cleanup не меняли пароли/public/default routes. Background polling главного приложения продолжался; отсутствие всех background SQL writes не заявляется.
+
+Первый сценарий остановился из-за ошибки теста: ожидал200 от POST peer, фактический корректный201. После исправления сценарий прошёл весь native lifecycle, но завершающий disabled PATCH вернул500 из-за реального дефекта общего getter. Оба отрицательных протокола сохранены; getter исправлен,33 isolated API/SQL cases и полный native сценарий на финальном образе прошли. Frontend повторно не собирался из-за backend-only gate delta.
+
+Runtime backend/frontend ux-wg152 healthy; deployed live read-only catalog/create-sheet на1440/320 passed после cleanup. Browser mutations покрыты controlled E2E, реальные RouterOS mutations — production handlers в выделенной базе. IPv6 ULA inner по IPv4 WireGuard outer, не IPv6 public WAN/client OS/throughput/scale/lost ACK physical acceptance. From-pool/EUI-64/multiple-address import/export остаются явными ограничениями; full regression после139 не повторялась.
+
+Протоколы: [native/cleanup](ux-ui/acceptance/wireguard-ipv6-native-2026-10-11.json), [API/history/import/export](ux-ui/acceptance/wireguard-ipv6-api-history-2026-10-11.json), [33 SQL/API gates](ux-ui/acceptance/network-disabled-sql-2026-10-11.json), [до исправления getter](ux-ui/acceptance/wireguard-ipv6-before-gate-api-2026-10-11.json), [compiled](ux-ui/acceptance/wireguard-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/wireguard-ipv6-smoke-2026-10-11.json).
+
+Следующий153 — sustained OSPF/BFD-only gate и recovery на собственных GRE;12.5 остаётся открытым.
@@ -1,12 +1,12 @@
 # План реализации UX/UI по пятичасовым окнам

-Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
+Актуальное продолжение 2026-10-11: завершён12.5.152 — WireGuard IPv6 static lifecycle/create/PATCH/history/delete и single-address RSC/conf export/import.29 real API cases, native handshake/Ping3/3×2,33 disabled-server API/SQL cases всех трёх типов с zero ROS contacts,56 backend tests/профили GRE и контейнеров/live maps,10 E2E/types/ESLint/builds/984 parity/live PC/mobile passed. Runtime backend/frontend ux-wg152 healthy;12.5 открыт. Следующий153 — OSPF/BFD sustained gate: BFD-only loss при сохранённых OSPF Hello на собственных GRE, восстановление и independent cleanup.

 Общий план проекта MikrotikManager. Основан на согласованном плане из задачи; точка продолжения обновлена 2026-10-10. Источник фактического прогресса, проверок и ограничений — [журнал реализации](ux-ui-progress.md). Этот документ задаёт объём и критерии завершения, журнал фиксирует результат.

 ## Актуальная точка продолжения — 2026-10-10

-Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
+Актуальное продолжение 2026-10-11: завершён12.5.152 — WireGuard IPv6 static lifecycle/create/PATCH/history/delete и single-address RSC/conf export/import.29 real API cases, native handshake/Ping3/3×2,33 disabled-server API/SQL cases всех трёх типов с zero ROS contacts,56 backend tests/профили GRE и контейнеров/live maps,10 E2E/types/ESLint/builds/984 parity/live PC/mobile passed. Runtime backend/frontend ux-wg152 healthy;12.5 открыт. Следующий153 — OSPF/BFD sustained gate: BFD-only loss при сохранённых OSPF Hello на собственных GRE, восстановление и independent cleanup.

 Этапы0–11 завершены в локальных границах журнала. История выполненных внешних блоков и доказательства сохранены в [журнале](ux-ui-stage-12.md) и [протоколе](ux-ui-external-acceptance.md). Реальная Telegram доставка, Portal SSO, multi-instance и оставшиеся профильные сетевые ограничения открыты.

@@ -371,6 +371,6 @@ flowchart LR

 ## 12.5.77 — основной блок IPsec (2026-10-09)

-Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
+Актуальное продолжение 2026-10-11: завершён12.5.152 — WireGuard IPv6 static lifecycle/create/PATCH/history/delete и single-address RSC/conf export/import.29 real API cases, native handshake/Ping3/3×2,33 disabled-server API/SQL cases всех трёх типов с zero ROS contacts,56 backend tests/профили GRE и контейнеров/live maps,10 E2E/types/ESLint/builds/984 parity/live PC/mobile passed. Runtime backend/frontend ux-wg152 healthy;12.5 открыт. Следующий153 — OSPF/BFD sustained gate: BFD-only loss при сохранённых OSPF Hello на собственных GRE, восстановление и independent cleanup.

 Подробный объём, протоколы, схема и ограничения: [12.5.77 в журнале](ux-ui-progress.md).
@@ -1,6 +1,6 @@
 # UX/UI: журнал реализации

-Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
+Актуальное продолжение 2026-10-11: завершён12.5.152 — WireGuard IPv6 static lifecycle/create/PATCH/history/delete и single-address RSC/conf export/import.29 real API cases, native handshake/Ping3/3×2,33 disabled-server API/SQL cases всех трёх типов с zero ROS contacts,56 backend tests/профили GRE и контейнеров/live maps,10 E2E/types/ESLint/builds/984 parity/live PC/mobile passed. Runtime backend/frontend ux-wg152 healthy;12.5 открыт. Следующий153 — OSPF/BFD sustained gate: BFD-only loss при сохранённых OSPF Hello на собственных GRE, восстановление и independent cleanup.

 Общий план: [UX/UI по этапам и пятичасовым окнам](ux-ui-plan.md). План задаёт объём, этот журнал фиксирует выполненные блоки и ограничения. Записи расположены от новых к старым; подробная история этапа12 также сохранена в [ux-ui-stage-12.md](ux-ui-stage-12.md).

@@ -36,7 +36,27 @@
 | 10 | Маршрутизация, диагностика, карта и терминал | Завершён в границах локальной приёмки 2026-10-01; блоки 10.1–10.71, внешние ограничения в 10.71 |
 | 11А | Пользователи, контейнеры, сертификаты и резервные копии | Завершён в границах локальной приёмки 2026-10-01; 11А.1–11А.33, внешние ограничения в 11А.33 |
 | 11Б | Оповещения, сбор данных, интеграции, релизы и настройки | Завершён в границах локальной приёмки 2026-10-03; ограничения и evidence в11Б.7 |
-| 12 | Итоговая доступность, адаптивность, производительность и регрессия | Локальная приёмка завершена в границах12.3.83; внешняя12.5 в работе, выполненные блоки1–151 и ограничения ниже. Runtime backend ux-month149/frontend ux-sessions150. |
+| 12 | Итоговая доступность, адаптивность, производительность и регрессия | Локальная приёмка завершена в границах12.3.83; внешняя12.5 в работе, выполненные блоки1–152 и ограничения ниже. Runtime backend ux-month149/frontend ux-sessions150. |
+
+## 12.5.152 — IPv6 lifecycle WireGuard и общий допуск выключенных серверов (2026-10-11)
+
+WireGuard читает оба address catalogs; ошибки/не-массивы не превращаются в пустые данные. Catalog показывает активный статический адрес, новые snapshots сохраняют все статические адреса с disabled/advertise/comment/no-dad. Dynamic link-local исключён из управления. Create и PATCH address, history restore и delete выбирают семейство по CIDR; дополнительные адреса сохранены, legacy snapshot с несколькими текущими адресами409. Общий адресный planner переиспользован GRE/WireGuard; constructor alias GreRestoreConflict совместим. PATCH не переименовывает одновременно интерфейс и адрес.
+
+Import подтверждает receipts в /ip/address и /ipv6/address раздельно, normalized IPv6 identities принимаются, automatic link-local не считается чужим static child. Lost/unconfirmed receipt не разрешает удаление по одному имени; rollback не удаляет IPv4 с совпавшим IPv6 ID. IPv6 RSC export использует /ipv6 address add +advertise=no, parser распознаёт IPv6 address line. Multiple/special address import и export явно отклоняются вместо тихой потери данных. Это single-address literal import/export, не произвольный RouterOS configuration codec. Существующий ReUI create sheet получил подсказку IPv4/IPv6; структура/Frame/base-nova сохранены.
+
+При native приёмке обнаружено: getEnabledServerById ранее проверял только ID. Теперь общий getter допускает только enabled=true и полный корректный DB ID; WireGuard selected catalog также исключает disabled. Это влияет на использующих getter GRE/WireGuard/firewall/containers/traffic/overlay. Постоянный opt-in test network-disabled-server.test.ts делает33 API/SQL cases: три типа Home Router/Jump Host/Exit Node ×11 calls, factory любого ROS client запрещена, contacts=0, enabled positive control проходит.8 malformed IDs проверяются до SQL, включая unsafe/выход за integer DB range. Без MMAPP_OWN_TEST_DB SQL часть честно skipped; в собственном PG стенде выполнена и база удалена.
+
+Проверки:56 node:test cases import/rollback/revision/delete, service/config/HTTP scripts, GRE config-sync и14 invalid GRE requests, containers/live-maps profiles;10 E2E (WireGuard IPv6/error-retained input PC/mobile, tables/menus и GRE smoke после общего planner), source types/ESLint; обе production сборки,984 emitted outputs совпали с окончательным backend.
+
+Native изолированная PG + production handlers + оба CHR:29 API cases, native handshake0s и Ping3/3 в обе стороны после IPv6 invalid=false; create/PATCH/IPv6→IPv4/clear, multiple-address history restore, legacy409, export multiple409, RSC/conf single IPv6 export и реальный import/delete, disabled GET empty/PATCH404 с forbidden factory. После каждого запуска9 static collections×2 совпали, собственные интерфейсы/peers/адреса и PG базы удалены. Native source/cleanup не меняли пароли/public/default routes. Background polling главного приложения продолжался; отсутствие всех background SQL writes не заявляется.
+
+Первый сценарий остановился из-за ошибки теста: ожидал200 от POST peer, фактический корректный201. После исправления сценарий прошёл весь native lifecycle, но завершающий disabled PATCH вернул500 из-за реального дефекта общего getter. Оба отрицательных протокола сохранены; getter исправлен,33 isolated API/SQL cases и полный native сценарий на финальном образе прошли. Frontend повторно не собирался из-за backend-only gate delta.
+
+Runtime backend/frontend ux-wg152 healthy; deployed live read-only catalog/create-sheet на1440/320 passed после cleanup. Browser mutations покрыты controlled E2E, реальные RouterOS mutations — production handlers в выделенной базе. IPv6 ULA inner по IPv4 WireGuard outer, не IPv6 public WAN/client OS/throughput/scale/lost ACK physical acceptance. From-pool/EUI-64/multiple-address import/export остаются явными ограничениями; full regression после139 не повторялась.
+
+Протоколы: [native/cleanup](ux-ui/acceptance/wireguard-ipv6-native-2026-10-11.json), [API/history/import/export](ux-ui/acceptance/wireguard-ipv6-api-history-2026-10-11.json), [33 SQL/API gates](ux-ui/acceptance/network-disabled-sql-2026-10-11.json), [до исправления getter](ux-ui/acceptance/wireguard-ipv6-before-gate-api-2026-10-11.json), [compiled](ux-ui/acceptance/wireguard-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/wireguard-ipv6-smoke-2026-10-11.json).
+
+Следующий153 — sustained OSPF/BFD-only gate и recovery на собственных GRE;12.5 остаётся открытым.

 ## 12.5.151 — управление статическими IPv6-адресами GRE (2026-10-11)

@@ -1,8 +1,8 @@
 # Оставшаяся внешняя приёмка — 2026-10-11

-Это актуальная матрица после 12.5.151. Исторические записи сохраняют версии и ограничения на момент выполнения; поздние проверки ниже уточняют их. Этап 12.5 открыт. Успех в двух CHR и одном backend не означает приёмку всех конфигураций, интеграций или полной регрессии.
+Это актуальная матрица после 12.5.152. Исторические записи сохраняют версии и ограничения на момент выполнения; поздние проверки ниже уточняют их. Этап 12.5 открыт. Успех в двух CHR и одном backend не означает приёмку всех конфигураций, интеграций или полной регрессии.

-Стенд: Debian13/Compose, PostgreSQL18.6, два CHR RouterOS7.24.5. Backend `ux-gre151`, frontend `ux-gre151`; production lab использует AUTH_REQUIRED=false. Подписанные JWT/RBAC проверялись в изолированных процессах. Все собственные объекты112 удалены, исходные13 коллекций×2 (включая logging/certificates/files/routes) проверены; пароли не менялись.
+Стенд: Debian13/Compose, PostgreSQL18.6, два CHR RouterOS7.24.5. Backend `ux-wg152`, frontend `ux-wg152`; production lab использует AUTH_REQUIRED=false. Подписанные JWT/RBAC проверялись в изолированных процессах. Все собственные объекты112 удалены, исходные13 коллекций×2 (включая logging/certificates/files/routes) проверены; пароли не менялись.

 | Раздел | Подтверждено | Осталось / условие завершения |
 | --- | --- | --- |
@@ -10,7 +10,7 @@
 | Speed/uptime | TCP transmit/receive/both32–33, короткий UDP34, auth failure25, transport timeout27, интерфейс after-ping28–29, snapshot/history race23–24 | Busy/abort/physical WAN disconnect; HTTP receipt socket disconnect принят97; независимое доказательство multi-WAN source/path; Home→JH/JH↔Exit с асимметричными каналами ; ROS-10 POST/SQL/GET и три часовых пояса приняты96. Короткие тесты не доказывают maximum throughput |
 | Outbox | Production PG claim/dedupe/settlement/retry/JWT/browser checkpoint/a11y35–49 | Настоящий Telegram API/чат, физический timeout после возможной отправки, несколько sender процессов. Нужны тестовый бот/чат и прямое разрешение на конкретное сообщение; подменённый ответ не доказывает доставку |
 | GRE | Native lifecycle, metadata, live формы/меню/URL/Ping53–57; GRE используется в OSPF/BGP/IPsec последующих блоков; native IPv6 ULA inner109; application static IPv6 lifecycle151 | IPv6 outer, from-pool/EUI-64, независимые WAN, масштаб и длительное восстановление; принятие GRE не означает приёмку всех сценариев автоматического расписания |
-| WireGuard | Native handshake/data plane58, deletion60, live create/peer/disable/enable/delete62, mobile64, export/import67–74; native IPv6 ULA inner/allowedIps/handshake109 | Клиентские ОС и произвольные конфигурации, IPv6 outer/scale и application IPv6 interface address lifecycle, физический lost ACK и устойчивое восстановление; `.conf` с placeholders — шаблон, не принятый клиентский tunnel |
+| WireGuard | Native handshake/data plane58, deletion60, live create/peer/disable/enable/delete62, mobile64, export/import67–74; native IPv6 ULA inner/allowedIps/handshake109; application static IPv6 lifecycle152 | Клиентские ОС и произвольные конфигурации, IPv6 outer/scale, from-pool/EUI-64 и multiple-address import/export, физический lost ACK и устойчивое восстановление; `.conf` с placeholders — шаблон, не принятый клиентский tunnel |
 | VXLAN | Собственная пара/private Ping/catalog/URL/export75–76; bridge/FDB/port loss/recovery107; IPv6 ULA inner по IPv4 outer108 | API приложения read-only: create/delete проверены native. IPv6 outer, масштаб/производительность, профильные mutation RBAC/concurrency отдельно не приняты |
 | IPsec | PSK и сертификатное шифрование77–82, active peer/online/mode-config, scoped NAT/group, partial/unknown/applied receipts, restore conflicts, JWT; full DN/специальные символы/online110; literal CN namespace guards и explicit FQDN111; certificate/PSK shared ID unknown/recovery112; multiple sessions controlled snapshots113; shared certificate rows/target guards114; preserve-certificate UI/native DELETE115; explicit deletion binding/PSK collision116; legacy export binding118; real duplicate DN sessions/Linux Ping/UI119; DN DER/ASCII tag и FQDN SAN native120; implicit unique DNS SAN/mixed IDs/API/UI121; короткий CHILD/IKE rekey/reconnect122; server pin и unbound same-CA certificate refusal123; own RSA Root/Intermediate/client chain/CRLs/IKE/reauth138; external revoked CRL new-handshake refusal/existing-session boundary137; certificate-bound malformed/signed expired CRL IKE refusal/recovery136; certificate-bound missing-CDP404/IKE refusal and recovery135; external HTTP CRL download/404/cache preservation134; isolated diagnostic buffers132; own ECDSA P-256/Ping/API export131 and final18×2 inventory; isolated same-key/CA time boundary with explicit AUTH_FAILED130; valid-renewal control timeout/clock/log observation129; original/renewed controls and time-invalid timeout observation128; CRL-issued cert/CA no-write delete guards127; own CRL-enabled valid/revoked control126; local revoked flag/CRL-disabled reconnect observation125; certificate reauth/CHILD absence boundary/UI124 | Реальные duplicate certificate-derived DN sessions приняты119; arbitrary custom PKI/OIDs/policies/path-length and missing/intermediate-revoked chain; native intermediate chain accepted138; ECDSA P-256 accepted131;128/129 timeout cause still unknown,130 time boundary accepted; periodic refresh; existing IKE survives short external-revocation observation137, automatic termination not guaranteed; direct CHR-to-CHR CRL HTTP failure cause134; reauth/CHILD loss принят124; длительный rekey/переходная потеря пакетов; прочие ID типы/ADDR4/manual DN/custom PKI; native edit identical matching rules rejected; клиентские Windows/macOS/iOS/Android, прочие DN форматы/custom OIDs/IKE ID namespaces, полная PKI и policy/profile/proposal restore, физический disconnect, durable retry/multi-instance, IPv6/maximum throughput |
 | OSPF/BFD | Real Full/own routes84–85, раздельные наблюдения BFD86, effective disabled/optimizer cost/partial/RBAC87, alternate path90 и CIDR91 | Sustained BFD-only gate не принят: в86 сосед мог вновь статьFull при доступныхHello. В90 переходный Ping18/40 с55% loss: бесшовность не принята. REST timing — наблюдаемая граница, не SLA; IPv6/scale/independent WAN открыты |
@@ -18,7 +18,7 @@
 | Recursive routes | Production PUT/change/own history restore88, disabled guards, partial/unknown/applied outcomes, live формы/контекст | Автоматический rollback/retry, durable receipts и несколько экземпляров отсутствуют; PUT не является idempotent noop. Полная произвольная legacy catalog миграция не принята |
 | Diagnostics/terminal | Allowlist/native reads, Ping/trace/route/MTU/DNS, actual avg-rtt, disabled guards, JWT/live PC/mobile89; real default memory tail/log limits/API/UI133 | DNS использует backend resolver; MTU — ограниченная оценка, не гарантированный максимум. Stop ожидания не доказывает остановку RouterOS команды; arbitrary CLI и physical disconnect не приняты |
 | Portal/интеграции | Локальные и isolated JWT guards; UI/API error states в границах журналов | Настоящий Portal issuer/login/отзыв прав; RIPE SDK two-IP/no-fetch passed140, native IPv6 ULA flow pipeline passed145 (IPv4 transport), public IPv6 WAN/local licensed MaxMind/S3/container/certificate jobs и Gitea delivery требуют отдельных тестовых endpoints/аккаунтов. Не отправлять сообщения и не публиковать релиз без соответствующего поручения |
-| Общая приёмка | Локальная12.3.83; UI1244/context221/compiled984 parity139; профильные build/E2E/live проверки последующих блоков | Traffic initial live mock-id gate passed141; IPv6 special ranges/cache passed142; unknown RIPE coordinates passed143; IPv6 synthetic UDP/worker/SQL passed144; native CHR ULA/IPFIX/API/UI passed145; ICMPv6/IPv6 endpoint labels passed146; HTTP DTO validation passed147; scoped flow catalog/serverId guards passed148; strict monthly calendar passed149; Sessions labels passed150; application GRE static IPv6 lifecycle151 passed; следующий WireGuard IPv6 lifecycle152; последующие изменения проверять отдельно; scoped axe не означает полную WCAG сертификацию |
+| Общая приёмка | Локальная12.3.83; UI1244/context221/compiled984 parity139; профильные build/E2E/live проверки последующих блоков | Traffic initial live mock-id gate passed141; IPv6 special ranges/cache passed142; unknown RIPE coordinates passed143; IPv6 synthetic UDP/worker/SQL passed144; native CHR ULA/IPFIX/API/UI passed145; ICMPv6/IPv6 endpoint labels passed146; HTTP DTO validation passed147; scoped flow catalog/serverId guards passed148; strict monthly calendar passed149; Sessions labels passed150; application GRE static IPv6 lifecycle151 passed; WireGuard static IPv6 lifecycle152 и disabled SQL/API gates passed; следующий sustained OSPF/BFD153; последующие изменения проверять отдельно; scoped axe не означает полную WCAG сертификацию |

 Доказательства и точные ограничения: [полная история этапа12](ux-ui-stage-12.md), [внешний протокол](ux-ui-external-acceptance.md), [BGP93](ux-ui/acceptance/bgp-failover-2026-10-10.json), [паспорт стенда](ux-ui-test-server.md). Невыполненные пункты не являются все блокерами данного лабораторного сценария: для выпуска необходимо явно определить требуемые конфигурации и принять их либо согласовать ограничение.

@@ -564,3 +564,23 @@ Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address п
 Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).

 Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
+
+## 12.5.152 — IPv6 lifecycle WireGuard и общий допуск выключенных серверов (2026-10-11)
+
+WireGuard читает оба address catalogs; ошибки/не-массивы не превращаются в пустые данные. Catalog показывает активный статический адрес, новые snapshots сохраняют все статические адреса с disabled/advertise/comment/no-dad. Dynamic link-local исключён из управления. Create и PATCH address, history restore и delete выбирают семейство по CIDR; дополнительные адреса сохранены, legacy snapshot с несколькими текущими адресами409. Общий адресный planner переиспользован GRE/WireGuard; constructor alias GreRestoreConflict совместим. PATCH не переименовывает одновременно интерфейс и адрес.
+
+Import подтверждает receipts в /ip/address и /ipv6/address раздельно, normalized IPv6 identities принимаются, automatic link-local не считается чужим static child. Lost/unconfirmed receipt не разрешает удаление по одному имени; rollback не удаляет IPv4 с совпавшим IPv6 ID. IPv6 RSC export использует /ipv6 address add +advertise=no, parser распознаёт IPv6 address line. Multiple/special address import и export явно отклоняются вместо тихой потери данных. Это single-address literal import/export, не произвольный RouterOS configuration codec. Существующий ReUI create sheet получил подсказку IPv4/IPv6; структура/Frame/base-nova сохранены.
+
+При native приёмке обнаружено: getEnabledServerById ранее проверял только ID. Теперь общий getter допускает только enabled=true и полный корректный DB ID; WireGuard selected catalog также исключает disabled. Это влияет на использующих getter GRE/WireGuard/firewall/containers/traffic/overlay. Постоянный opt-in test network-disabled-server.test.ts делает33 API/SQL cases: три типа Home Router/Jump Host/Exit Node ×11 calls, factory любого ROS client запрещена, contacts=0, enabled positive control проходит.8 malformed IDs проверяются до SQL, включая unsafe/выход за integer DB range. Без MMAPP_OWN_TEST_DB SQL часть честно skipped; в собственном PG стенде выполнена и база удалена.
+
+Проверки:56 node:test cases import/rollback/revision/delete, service/config/HTTP scripts, GRE config-sync и14 invalid GRE requests, containers/live-maps profiles;10 E2E (WireGuard IPv6/error-retained input PC/mobile, tables/menus и GRE smoke после общего planner), source types/ESLint; обе production сборки,984 emitted outputs совпали с окончательным backend.
+
+Native изолированная PG + production handlers + оба CHR:29 API cases, native handshake0s и Ping3/3 в обе стороны после IPv6 invalid=false; create/PATCH/IPv6→IPv4/clear, multiple-address history restore, legacy409, export multiple409, RSC/conf single IPv6 export и реальный import/delete, disabled GET empty/PATCH404 с forbidden factory. После каждого запуска9 static collections×2 совпали, собственные интерфейсы/peers/адреса и PG базы удалены. Native source/cleanup не меняли пароли/public/default routes. Background polling главного приложения продолжался; отсутствие всех background SQL writes не заявляется.
+
+Первый сценарий остановился из-за ошибки теста: ожидал200 от POST peer, фактический корректный201. После исправления сценарий прошёл весь native lifecycle, но завершающий disabled PATCH вернул500 из-за реального дефекта общего getter. Оба отрицательных протокола сохранены; getter исправлен,33 isolated API/SQL cases и полный native сценарий на финальном образе прошли. Frontend повторно не собирался из-за backend-only gate delta.
+
+Runtime backend/frontend ux-wg152 healthy; deployed live read-only catalog/create-sheet на1440/320 passed после cleanup. Browser mutations покрыты controlled E2E, реальные RouterOS mutations — production handlers в выделенной базе. IPv6 ULA inner по IPv4 WireGuard outer, не IPv6 public WAN/client OS/throughput/scale/lost ACK physical acceptance. From-pool/EUI-64/multiple-address import/export остаются явными ограничениями; full regression после139 не повторялась.
+
+Протоколы: [native/cleanup](ux-ui/acceptance/wireguard-ipv6-native-2026-10-11.json), [API/history/import/export](ux-ui/acceptance/wireguard-ipv6-api-history-2026-10-11.json), [33 SQL/API gates](ux-ui/acceptance/network-disabled-sql-2026-10-11.json), [до исправления getter](ux-ui/acceptance/wireguard-ipv6-before-gate-api-2026-10-11.json), [compiled](ux-ui/acceptance/wireguard-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/wireguard-ipv6-smoke-2026-10-11.json).
+
+Следующий153 — sustained OSPF/BFD-only gate и recovery на собственных GRE;12.5 остаётся открытым.
@@ -1,6 +1,6 @@
 # Этап 12: итоговая приёмка UX/UI

-Актуальное продолжение 2026-10-11: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
+Актуальное продолжение 2026-10-11: завершён12.5.152 — WireGuard IPv6 static lifecycle/create/PATCH/history/delete и single-address RSC/conf export/import.29 real API cases, native handshake/Ping3/3×2,33 disabled-server API/SQL cases всех трёх типов с zero ROS contacts,56 backend tests/профили GRE и контейнеров/live maps,10 E2E/types/ESLint/builds/984 parity/live PC/mobile passed. Runtime backend/frontend ux-wg152 healthy;12.5 открыт. Следующий153 — OSPF/BFD sustained gate: BFD-only loss при сохранённых OSPF Hello на собственных GRE, восстановление и independent cleanup.

 План: [ux-ui-plan.md](ux-ui-plan.md). Фактические результаты: [ux-ui-progress.md](ux-ui-progress.md). Подготовлен после сводных проверок 11Б; завершение каждого блока требует локального коммита без push.

@@ -2954,3 +2954,23 @@ Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address п
 Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).

 Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
+
+## 12.5.152 — IPv6 lifecycle WireGuard и общий допуск выключенных серверов (2026-10-11)
+
+WireGuard читает оба address catalogs; ошибки/не-массивы не превращаются в пустые данные. Catalog показывает активный статический адрес, новые snapshots сохраняют все статические адреса с disabled/advertise/comment/no-dad. Dynamic link-local исключён из управления. Create и PATCH address, history restore и delete выбирают семейство по CIDR; дополнительные адреса сохранены, legacy snapshot с несколькими текущими адресами409. Общий адресный planner переиспользован GRE/WireGuard; constructor alias GreRestoreConflict совместим. PATCH не переименовывает одновременно интерфейс и адрес.
+
+Import подтверждает receipts в /ip/address и /ipv6/address раздельно, normalized IPv6 identities принимаются, automatic link-local не считается чужим static child. Lost/unconfirmed receipt не разрешает удаление по одному имени; rollback не удаляет IPv4 с совпавшим IPv6 ID. IPv6 RSC export использует /ipv6 address add +advertise=no, parser распознаёт IPv6 address line. Multiple/special address import и export явно отклоняются вместо тихой потери данных. Это single-address literal import/export, не произвольный RouterOS configuration codec. Существующий ReUI create sheet получил подсказку IPv4/IPv6; структура/Frame/base-nova сохранены.
+
+При native приёмке обнаружено: getEnabledServerById ранее проверял только ID. Теперь общий getter допускает только enabled=true и полный корректный DB ID; WireGuard selected catalog также исключает disabled. Это влияет на использующих getter GRE/WireGuard/firewall/containers/traffic/overlay. Постоянный opt-in test network-disabled-server.test.ts делает33 API/SQL cases: три типа Home Router/Jump Host/Exit Node ×11 calls, factory любого ROS client запрещена, contacts=0, enabled positive control проходит.8 malformed IDs проверяются до SQL, включая unsafe/выход за integer DB range. Без MMAPP_OWN_TEST_DB SQL часть честно skipped; в собственном PG стенде выполнена и база удалена.
+
+Проверки:56 node:test cases import/rollback/revision/delete, service/config/HTTP scripts, GRE config-sync и14 invalid GRE requests, containers/live-maps profiles;10 E2E (WireGuard IPv6/error-retained input PC/mobile, tables/menus и GRE smoke после общего planner), source types/ESLint; обе production сборки,984 emitted outputs совпали с окончательным backend.
+
+Native изолированная PG + production handlers + оба CHR:29 API cases, native handshake0s и Ping3/3 в обе стороны после IPv6 invalid=false; create/PATCH/IPv6→IPv4/clear, multiple-address history restore, legacy409, export multiple409, RSC/conf single IPv6 export и реальный import/delete, disabled GET empty/PATCH404 с forbidden factory. После каждого запуска9 static collections×2 совпали, собственные интерфейсы/peers/адреса и PG базы удалены. Native source/cleanup не меняли пароли/public/default routes. Background polling главного приложения продолжался; отсутствие всех background SQL writes не заявляется.
+
+Первый сценарий остановился из-за ошибки теста: ожидал200 от POST peer, фактический корректный201. После исправления сценарий прошёл весь native lifecycle, но завершающий disabled PATCH вернул500 из-за реального дефекта общего getter. Оба отрицательных протокола сохранены; getter исправлен,33 isolated API/SQL cases и полный native сценарий на финальном образе прошли. Frontend повторно не собирался из-за backend-only gate delta.
+
+Runtime backend/frontend ux-wg152 healthy; deployed live read-only catalog/create-sheet на1440/320 passed после cleanup. Browser mutations покрыты controlled E2E, реальные RouterOS mutations — production handlers в выделенной базе. IPv6 ULA inner по IPv4 WireGuard outer, не IPv6 public WAN/client OS/throughput/scale/lost ACK physical acceptance. From-pool/EUI-64/multiple-address import/export остаются явными ограничениями; full regression после139 не повторялась.
+
+Протоколы: [native/cleanup](ux-ui/acceptance/wireguard-ipv6-native-2026-10-11.json), [API/history/import/export](ux-ui/acceptance/wireguard-ipv6-api-history-2026-10-11.json), [33 SQL/API gates](ux-ui/acceptance/network-disabled-sql-2026-10-11.json), [до исправления getter](ux-ui/acceptance/wireguard-ipv6-before-gate-api-2026-10-11.json), [compiled](ux-ui/acceptance/wireguard-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/wireguard-ipv6-smoke-2026-10-11.json).
+
+Следующий153 — sustained OSPF/BFD-only gate и recovery на собственных GRE;12.5 остаётся открытым.
@@ -1,6 +1,6 @@
 # Тестовый сервер UX/UI — 2026-10-10

-Сервер161.104.46.222: завершён12.5.151 — GRE IPv6 static-address lifecycle через приложение: чтение/create/PATCH/history restore/delete, дополнительные/выключенные адреса, family-safe IDs и legacy409.15 профильных E2E, source types/ESLint, обе production сборки, 984 compiled parity и real native API/SQL/Ping3/3×2/cleanup прошли. Runtime backend/frontend ux-gre151 healthy;12.5 открыт. Следующий152 — application WireGuard IPv6 address lifecycle, включая импорт/историю/удаление; работать укрупнённым разделом без повторения принятого GRE.
+Сервер161.104.46.222: завершён12.5.152 — WireGuard IPv6 static lifecycle/create/PATCH/history/delete и single-address RSC/conf export/import.29 real API cases, native handshake/Ping3/3×2,33 disabled-server API/SQL cases всех трёх типов с zero ROS contacts,56 backend tests/профили GRE и контейнеров/live maps,10 E2E/types/ESLint/builds/984 parity/live PC/mobile passed. Runtime backend/frontend ux-wg152 healthy;12.5 открыт. Следующий153 — OSPF/BFD sustained gate: BFD-only loss при сохранённых OSPF Hello на собственных GRE, восстановление и independent cleanup.

 | Параметр | Проверенное состояние |
 | --- | --- |
@@ -14,7 +14,7 @@
 | PostgreSQL | postgres:18-alpine,18.6;mmapp-test-postgres healthy;SELECT version() passed |
 | Данные | Отдельный Compose project mmapp-test,том mmapp-test_mmapp-pgdata и каталог ./data |
 | Доступ | PostgreSQL не публикуется;frontend3000/backend8000 привязаны к127.0.0.1 после запуска |
-| Образы приложения | mmapp-test/backend:ux-gre151 и mmapp-test/frontend:ux-gre151; запущены |
+| Образы приложения | mmapp-test/backend:ux-wg152 и mmapp-test/frontend:ux-wg152; запущены |

 Compose SHA256:3052bd6ab5d9865f97605cebfb5ff27a4410cd3357b81153a65a87fb7c92582f. OptionalBACKEND_IMAGE_TAG позволяетобновлятьbackendотдельно. Локальный и удалённый файлы совпали. Шаблоны: [Compose](../deploy/docker-compose.test.yml), [env без секретов](../deploy/env.test.example).

@@ -1380,3 +1380,23 @@ Create/PATCH/restore/delete выбирают /ip/address или /ipv6/address п
 Протоколы: [native/cleanup](ux-ui/acceptance/gre-ipv6-native-2026-10-11.json), [API/history](ux-ui/acceptance/gre-ipv6-api-history-2026-10-11.json), [первый запуск](ux-ui/acceptance/gre-ipv6-initial-cleanup-2026-10-11.json), [compiled parity](ux-ui/acceptance/gre-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/gre-ipv6-smoke-2026-10-11.json).

 Границы: IPv6 ULA inner по IPv4 GRE outer; IPv6 outer/public WAN, scale, длительное восстановление и from-pool/EUI-64 не приняты. Полная регрессия после139 не повторялась: выполнен профиль изменённых областей. Следующий152 — WireGuard IPv6 lifecycle;12.5 остаётся открытым.
+
+## 12.5.152 — IPv6 lifecycle WireGuard и общий допуск выключенных серверов (2026-10-11)
+
+WireGuard читает оба address catalogs; ошибки/не-массивы не превращаются в пустые данные. Catalog показывает активный статический адрес, новые snapshots сохраняют все статические адреса с disabled/advertise/comment/no-dad. Dynamic link-local исключён из управления. Create и PATCH address, history restore и delete выбирают семейство по CIDR; дополнительные адреса сохранены, legacy snapshot с несколькими текущими адресами409. Общий адресный planner переиспользован GRE/WireGuard; constructor alias GreRestoreConflict совместим. PATCH не переименовывает одновременно интерфейс и адрес.
+
+Import подтверждает receipts в /ip/address и /ipv6/address раздельно, normalized IPv6 identities принимаются, automatic link-local не считается чужим static child. Lost/unconfirmed receipt не разрешает удаление по одному имени; rollback не удаляет IPv4 с совпавшим IPv6 ID. IPv6 RSC export использует /ipv6 address add +advertise=no, parser распознаёт IPv6 address line. Multiple/special address import и export явно отклоняются вместо тихой потери данных. Это single-address literal import/export, не произвольный RouterOS configuration codec. Существующий ReUI create sheet получил подсказку IPv4/IPv6; структура/Frame/base-nova сохранены.
+
+При native приёмке обнаружено: getEnabledServerById ранее проверял только ID. Теперь общий getter допускает только enabled=true и полный корректный DB ID; WireGuard selected catalog также исключает disabled. Это влияет на использующих getter GRE/WireGuard/firewall/containers/traffic/overlay. Постоянный opt-in test network-disabled-server.test.ts делает33 API/SQL cases: три типа Home Router/Jump Host/Exit Node ×11 calls, factory любого ROS client запрещена, contacts=0, enabled positive control проходит.8 malformed IDs проверяются до SQL, включая unsafe/выход за integer DB range. Без MMAPP_OWN_TEST_DB SQL часть честно skipped; в собственном PG стенде выполнена и база удалена.
+
+Проверки:56 node:test cases import/rollback/revision/delete, service/config/HTTP scripts, GRE config-sync и14 invalid GRE requests, containers/live-maps profiles;10 E2E (WireGuard IPv6/error-retained input PC/mobile, tables/menus и GRE smoke после общего planner), source types/ESLint; обе production сборки,984 emitted outputs совпали с окончательным backend.
+
+Native изолированная PG + production handlers + оба CHR:29 API cases, native handshake0s и Ping3/3 в обе стороны после IPv6 invalid=false; create/PATCH/IPv6→IPv4/clear, multiple-address history restore, legacy409, export multiple409, RSC/conf single IPv6 export и реальный import/delete, disabled GET empty/PATCH404 с forbidden factory. После каждого запуска9 static collections×2 совпали, собственные интерфейсы/peers/адреса и PG базы удалены. Native source/cleanup не меняли пароли/public/default routes. Background polling главного приложения продолжался; отсутствие всех background SQL writes не заявляется.
+
+Первый сценарий остановился из-за ошибки теста: ожидал200 от POST peer, фактический корректный201. После исправления сценарий прошёл весь native lifecycle, но завершающий disabled PATCH вернул500 из-за реального дефекта общего getter. Оба отрицательных протокола сохранены; getter исправлен,33 isolated API/SQL cases и полный native сценарий на финальном образе прошли. Frontend повторно не собирался из-за backend-only gate delta.
+
+Runtime backend/frontend ux-wg152 healthy; deployed live read-only catalog/create-sheet на1440/320 passed после cleanup. Browser mutations покрыты controlled E2E, реальные RouterOS mutations — production handlers в выделенной базе. IPv6 ULA inner по IPv4 WireGuard outer, не IPv6 public WAN/client OS/throughput/scale/lost ACK physical acceptance. From-pool/EUI-64/multiple-address import/export остаются явными ограничениями; full regression после139 не повторялась.
+
+Протоколы: [native/cleanup](ux-ui/acceptance/wireguard-ipv6-native-2026-10-11.json), [API/history/import/export](ux-ui/acceptance/wireguard-ipv6-api-history-2026-10-11.json), [33 SQL/API gates](ux-ui/acceptance/network-disabled-sql-2026-10-11.json), [до исправления getter](ux-ui/acceptance/wireguard-ipv6-before-gate-api-2026-10-11.json), [compiled](ux-ui/acceptance/wireguard-ipv6-compiled-2026-10-11.json), [live UI](ux-ui/acceptance/wireguard-ipv6-smoke-2026-10-11.json).
+
+Следующий153 — sustained OSPF/BFD-only gate и recovery на собственных GRE;12.5 остаётся открытым.
@@ -0,0 +1,12 @@
+{
+  "date": "2026-10-11",
+  "name": "mm_accept_152_1791731008028",
+  "tests": [
+    {
+      "module": "network-disabled152",
+      "passed": true,
+      "output": "network-disabled-server.test.ts: 33 API/SQL checks for three types, zero RouterOS contacts, enabled positive control passed\n"
+    }
+  ],
+  "databaseRemoved": true
+}
@@ -0,0 +1,185 @@
+{
+  "date": "2026-10-11",
+  "block": "12.5.152",
+  "name": "mm-wg152-1791731017548",
+  "cases": [
+    {
+      "method": "POST",
+      "path": "/wireguard/interfaces",
+      "status": 201
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/interfaces",
+      "status": 201
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/peers",
+      "status": 201
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/peers",
+      "status": 201
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard/revisions?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "PATCH",
+      "path": "/wireguard/interfaces/1/*97",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard/revisions?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/export",
+      "status": 409
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/legacy-mm_accept_152_1791731017548/restore",
+      "status": 409
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/1de6597b-eceb-4f17-8d16-2600471cb08f/restore",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/780d0a98-d237-4822-8502-9410b8f1e0fc/restore",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/1de6597b-eceb-4f17-8d16-2600471cb08f/restore",
+      "status": 200
+    },
+    {
+      "method": "PATCH",
+      "path": "/wireguard/interfaces/1/*97",
+      "status": 200
+    },
+    {
+      "method": "PATCH",
+      "path": "/wireguard/interfaces/1/*97",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/1de6597b-eceb-4f17-8d16-2600471cb08f/restore",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/export",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/export",
+      "status": 200
+    },
+    {
+      "method": "DELETE",
+      "path": "/wireguard/interfaces/1/*97",
+      "status": 200
+    },
+    {
+      "method": "DELETE",
+      "path": "/wireguard/interfaces/2/*76",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/import",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "DELETE",
+      "path": "/wireguard/interfaces/1/*98",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/import",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "DELETE",
+      "path": "/wireguard/interfaces/1/*99",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "PATCH",
+      "path": "/wireguard/interfaces/1/*97",
+      "status": 404
+    }
+  ],
+  "pings": [
+    {
+      "serverId": 1,
+      "sent": 3,
+      "received": 3
+    },
+    {
+      "serverId": 2,
+      "sent": 3,
+      "received": 3
+    }
+  ],
+  "ready": [
+    {
+      "serverId": 1,
+      "addressInvalid": "false"
+    },
+    {
+      "serverId": 2,
+      "addressInvalid": "false"
+    }
+  ],
+  "handshakes": [
+    {
+      "serverId": 1,
+      "lastHandshake": "0s"
+    },
+    {
+      "serverId": 2,
+      "lastHandshake": "0s"
+    }
+  ],
+  "passed": true
+}
@@ -0,0 +1,179 @@
+{
+  "date": "2026-10-11",
+  "block": "12.5.152",
+  "name": "mm-wg152-1791730555296",
+  "cases": [
+    {
+      "method": "POST",
+      "path": "/wireguard/interfaces",
+      "status": 201
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/interfaces",
+      "status": 201
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/peers",
+      "status": 201
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/peers",
+      "status": 201
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard/revisions?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "PATCH",
+      "path": "/wireguard/interfaces/1/*94",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard/revisions?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/export",
+      "status": 409
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/legacy-mm_accept_152_1791730555296/restore",
+      "status": 409
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/420f83f6-f319-4bf9-9eb8-d37b8acb49d5/restore",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/52635299-be9a-4d64-b7e0-e2e268af5811/restore",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/420f83f6-f319-4bf9-9eb8-d37b8acb49d5/restore",
+      "status": 200
+    },
+    {
+      "method": "PATCH",
+      "path": "/wireguard/interfaces/1/*94",
+      "status": 200
+    },
+    {
+      "method": "PATCH",
+      "path": "/wireguard/interfaces/1/*94",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/revisions/420f83f6-f319-4bf9-9eb8-d37b8acb49d5/restore",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/export",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/export",
+      "status": 200
+    },
+    {
+      "method": "DELETE",
+      "path": "/wireguard/interfaces/1/*94",
+      "status": 200
+    },
+    {
+      "method": "DELETE",
+      "path": "/wireguard/interfaces/2/*75",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/import",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "DELETE",
+      "path": "/wireguard/interfaces/1/*95",
+      "status": 200
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/import",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    },
+    {
+      "method": "DELETE",
+      "path": "/wireguard/interfaces/1/*96",
+      "status": 200
+    },
+    {
+      "method": "GET",
+      "path": "/wireguard?serverId=1",
+      "status": 200
+    }
+  ],
+  "pings": [
+    {
+      "serverId": 1,
+      "sent": 3,
+      "received": 3
+    },
+    {
+      "serverId": 2,
+      "sent": 3,
+      "received": 3
+    }
+  ],
+  "ready": [
+    {
+      "serverId": 1,
+      "addressInvalid": "false"
+    },
+    {
+      "serverId": 2,
+      "addressInvalid": "false"
+    }
+  ],
+  "handshakes": [
+    {
+      "serverId": 1,
+      "lastHandshake": "0s"
+    },
+    {
+      "serverId": 2,
+      "lastHandshake": "0s"
+    }
+  ]
+}
@@ -0,0 +1,49 @@
+{
+  "date": "2026-10-11",
+  "block": "12.5.152",
+  "name": "mm-wg152-1791730555296",
+  "devices": [
+    {
+      "serverId": 1,
+      "host": "194.226.121.150",
+      "version": "7.24.5 (stable)",
+      "reachable": true
+    },
+    {
+      "serverId": 2,
+      "host": "104.165.244.7",
+      "version": "7.24.5 (stable)",
+      "reachable": true
+    }
+  ],
+  "cleanup": [
+    {
+      "serverId": 1,
+      "/interface/wireguard/peers": true,
+      "/interface/wireguard": true,
+      "/ip/address": true,
+      "/ipv6/address": true,
+      "/ip/route": true,
+      "/ipv6/route": true,
+      "/ip/firewall/filter": true,
+      "/ip/firewall/nat": true,
+      "/ipv6/firewall/filter": true
+    },
+    {
+      "serverId": 2,
+      "/interface/wireguard/peers": true,
+      "/interface/wireguard": true,
+      "/ip/address": true,
+      "/ipv6/address": true,
+      "/ip/route": true,
+      "/ipv6/route": true,
+      "/ip/firewall/filter": true,
+      "/ip/firewall/nat": true,
+      "/ipv6/firewall/filter": true
+    }
+  ],
+  "childExit": 1,
+  "error": "Child failed: inspect private log\n\n1 !== 0\n",
+  "databaseRemoved": true,
+  "passed": false
+}
@@ -0,0 +1,994 @@
+{
+  "date": "2026-10-11",
+  "block": "12.5.152",
+  "backendVersion": "1.0.0-test.wg152",
+  "normalization": "CRLF to LF; emitted files derived from tracked non-test source inputs",
+  "matched": [
+    "backend/dist/config.js",
+    "backend/dist/config.js.map",
+    "backend/dist/config.d.ts",
+    "backend/dist/config.d.ts.map",
+    "backend/dist/constants/ping-probe.js",
+    "backend/dist/constants/ping-probe.js.map",
+    "backend/dist/constants/ping-probe.d.ts",
+    "backend/dist/constants/ping-probe.d.ts.map",
+    "backend/dist/db/bootstrap.js",
+    "backend/dist/db/bootstrap.js.map",
+    "backend/dist/db/bootstrap.d.ts",
+    "backend/dist/db/bootstrap.d.ts.map",
+    "backend/dist/db/index.js",
+    "backend/dist/db/index.js.map",
+    "backend/dist/db/index.d.ts",
+    "backend/dist/db/index.d.ts.map",
+    "backend/dist/db/json.js",
+    "backend/dist/db/json.js.map",
+    "backend/dist/db/json.d.ts",
+    "backend/dist/db/json.d.ts.map",
+    "backend/dist/db/migrate.js",
+    "backend/dist/db/migrate.js.map",
+    "backend/dist/db/migrate.d.ts",
+    "backend/dist/db/migrate.d.ts.map",
+    "backend/dist/db/operation-lock.js",
+    "backend/dist/db/operation-lock.js.map",
+    "backend/dist/db/operation-lock.d.ts",
+    "backend/dist/db/operation-lock.d.ts.map",
+    "backend/dist/db/partitions.js",
+    "backend/dist/db/partitions.js.map",
+    "backend/dist/db/partitions.d.ts",
+    "backend/dist/db/partitions.d.ts.map",
+    "backend/dist/db/schema.js",
+    "backend/dist/db/schema.js.map",
+    "backend/dist/db/schema.d.ts",
+    "backend/dist/db/schema.d.ts.map",
+    "backend/dist/db/sql-bind.js",
+    "backend/dist/db/sql-bind.js.map",
+    "backend/dist/db/sql-bind.d.ts",
+    "backend/dist/db/sql-bind.d.ts.map",
+    "backend/dist/db/sqlite-import.js",
+    "backend/dist/db/sqlite-import.js.map",
+    "backend/dist/db/sqlite-import.d.ts",
+    "backend/dist/db/sqlite-import.d.ts.map",
+    "backend/dist/db/traffic-flags.js",
+    "backend/dist/db/traffic-flags.js.map",
+    "backend/dist/db/traffic-flags.d.ts",
+    "backend/dist/db/traffic-flags.d.ts.map",
+    "backend/dist/index.js",
+    "backend/dist/index.js.map",
+    "backend/dist/index.d.ts",
+    "backend/dist/index.d.ts.map",
+    "backend/dist/lib/permissions.js",
+    "backend/dist/lib/permissions.js.map",
+    "backend/dist/lib/permissions.d.ts",
+    "backend/dist/lib/permissions.d.ts.map",
+    "backend/dist/managed-markers.js",
+    "backend/dist/managed-markers.js.map",
+    "backend/dist/managed-markers.d.ts",
+    "backend/dist/managed-markers.d.ts.map",
+    "backend/dist/modules/events/repository/events-repository.js",
+    "backend/dist/modules/events/repository/events-repository.js.map",
+    "backend/dist/modules/events/repository/events-repository.d.ts",
+    "backend/dist/modules/events/repository/events-repository.d.ts.map",
+    "backend/dist/modules/events/service/events-service.js",
+    "backend/dist/modules/events/service/events-service.js.map",
+    "backend/dist/modules/events/service/events-service.d.ts",
+    "backend/dist/modules/events/service/events-service.d.ts.map",
+    "backend/dist/modules/servers/mapper/servers-mapper.js",
+    "backend/dist/modules/servers/mapper/servers-mapper.js.map",
+    "backend/dist/modules/servers/mapper/servers-mapper.d.ts",
+    "backend/dist/modules/servers/mapper/servers-mapper.d.ts.map",
+    "backend/dist/modules/servers/repository/servers-repository.js",
+    "backend/dist/modules/servers/repository/servers-repository.js.map",
+    "backend/dist/modules/servers/repository/servers-repository.d.ts",
+    "backend/dist/modules/servers/repository/servers-repository.d.ts.map",
+    "backend/dist/modules/servers/service/servers-service.js",
+    "backend/dist/modules/servers/service/servers-service.js.map",
+    "backend/dist/modules/servers/service/servers-service.d.ts",
+    "backend/dist/modules/servers/service/servers-service.d.ts.map",
+    "backend/dist/modules/users/iface-type.js",
+    "backend/dist/modules/users/iface-type.js.map",
+    "backend/dist/modules/users/iface-type.d.ts",
+    "backend/dist/modules/users/iface-type.d.ts.map",
+    "backend/dist/modules/users/interface-inventory.js",
+    "backend/dist/modules/users/interface-inventory.js.map",
+    "backend/dist/modules/users/interface-inventory.d.ts",
+    "backend/dist/modules/users/interface-inventory.d.ts.map",
+    "backend/dist/modules/users/peer-bind.js",
+    "backend/dist/modules/users/peer-bind.js.map",
+    "backend/dist/modules/users/peer-bind.d.ts",
+    "backend/dist/modules/users/peer-bind.d.ts.map",
+    "backend/dist/modules/users/repository/users-repository.js",
+    "backend/dist/modules/users/repository/users-repository.js.map",
+    "backend/dist/modules/users/repository/users-repository.d.ts",
+    "backend/dist/modules/users/repository/users-repository.d.ts.map",
+    "backend/dist/modules/users/service/users-service.js",
+    "backend/dist/modules/users/service/users-service.js.map",
+    "backend/dist/modules/users/service/users-service.d.ts",
+    "backend/dist/modules/users/service/users-service.d.ts.map",
+    "backend/dist/plugins/auth.js",
+    "backend/dist/plugins/auth.js.map",
+    "backend/dist/plugins/auth.d.ts",
+    "backend/dist/plugins/auth.d.ts.map",
+    "backend/dist/plugins/database-request-gate.js",
+    "backend/dist/plugins/database-request-gate.js.map",
+    "backend/dist/plugins/database-request-gate.d.ts",
+    "backend/dist/plugins/database-request-gate.d.ts.map",
+    "backend/dist/routes/alerts.js",
+    "backend/dist/routes/alerts.js.map",
+    "backend/dist/routes/alerts.d.ts",
+    "backend/dist/routes/alerts.d.ts.map",
+    "backend/dist/routes/backups.js",
+    "backend/dist/routes/backups.js.map",
+    "backend/dist/routes/backups.d.ts",
+    "backend/dist/routes/backups.d.ts.map",
+    "backend/dist/routes/bgp.js",
+    "backend/dist/routes/bgp.js.map",
+    "backend/dist/routes/bgp.d.ts",
+    "backend/dist/routes/bgp.d.ts.map",
+    "backend/dist/routes/certificates.js",
+    "backend/dist/routes/certificates.js.map",
+    "backend/dist/routes/certificates.d.ts",
+    "backend/dist/routes/certificates.d.ts.map",
+    "backend/dist/routes/containers.js",
+    "backend/dist/routes/containers.js.map",
+    "backend/dist/routes/containers.d.ts",
+    "backend/dist/routes/containers.d.ts.map",
+    "backend/dist/routes/events.js",
+    "backend/dist/routes/events.js.map",
+    "backend/dist/routes/events.d.ts",
+    "backend/dist/routes/events.d.ts.map",
+    "backend/dist/routes/evobgp-catalog.js",
+    "backend/dist/routes/evobgp-catalog.js.map",
+    "backend/dist/routes/evobgp-catalog.d.ts",
+    "backend/dist/routes/evobgp-catalog.d.ts.map",
+    "backend/dist/routes/evobgp-settings.js",
+    "backend/dist/routes/evobgp-settings.js.map",
+    "backend/dist/routes/evobgp-settings.d.ts",
+    "backend/dist/routes/evobgp-settings.d.ts.map",
+    "backend/dist/routes/evobgp.js",
+    "backend/dist/routes/evobgp.js.map",
+    "backend/dist/routes/evobgp.d.ts",
+    "backend/dist/routes/evobgp.d.ts.map",
+    "backend/dist/routes/exec.js",
+    "backend/dist/routes/exec.js.map",
+    "backend/dist/routes/exec.d.ts",
+    "backend/dist/routes/exec.d.ts.map",
+    "backend/dist/routes/filters.js",
+    "backend/dist/routes/filters.js.map",
+    "backend/dist/routes/filters.d.ts",
+    "backend/dist/routes/filters.d.ts.map",
+    "backend/dist/routes/firewall.js",
+    "backend/dist/routes/firewall.js.map",
+    "backend/dist/routes/firewall.d.ts",
+    "backend/dist/routes/firewall.d.ts.map",
+    "backend/dist/routes/geoip.js",
+    "backend/dist/routes/geoip.js.map",
+    "backend/dist/routes/geoip.d.ts",
+    "backend/dist/routes/geoip.d.ts.map",
+    "backend/dist/routes/gre.js",
+    "backend/dist/routes/gre.js.map",
+    "backend/dist/routes/gre.d.ts",
+    "backend/dist/routes/gre.d.ts.map",
+    "backend/dist/routes/internet-path.js",
+    "backend/dist/routes/internet-path.js.map",
+    "backend/dist/routes/internet-path.d.ts",
+    "backend/dist/routes/internet-path.d.ts.map",
+    "backend/dist/routes/ipsec.js",
+    "backend/dist/routes/ipsec.js.map",
+    "backend/dist/routes/ipsec.d.ts",
+    "backend/dist/routes/ipsec.d.ts.map",
+    "backend/dist/routes/network.js",
+    "backend/dist/routes/network.js.map",
+    "backend/dist/routes/network.d.ts",
+    "backend/dist/routes/network.d.ts.map",
+    "backend/dist/routes/ospf.js",
+    "backend/dist/routes/ospf.js.map",
+    "backend/dist/routes/ospf.d.ts",
+    "backend/dist/routes/ospf.d.ts.map",
+    "backend/dist/routes/ping-probes-write.js",
+    "backend/dist/routes/ping-probes-write.js.map",
+    "backend/dist/routes/ping-probes-write.d.ts",
+    "backend/dist/routes/ping-probes-write.d.ts.map",
+    "backend/dist/routes/probes.js",
+    "backend/dist/routes/probes.js.map",
+    "backend/dist/routes/probes.d.ts",
+    "backend/dist/routes/probes.d.ts.map",
+    "backend/dist/routes/recursive-routes.js",
+    "backend/dist/routes/recursive-routes.js.map",
+    "backend/dist/routes/recursive-routes.d.ts",
+    "backend/dist/routes/recursive-routes.d.ts.map",
+    "backend/dist/routes/scheduler.js",
+    "backend/dist/routes/scheduler.js.map",
+    "backend/dist/routes/scheduler.d.ts",
+    "backend/dist/routes/scheduler.d.ts.map",
+    "backend/dist/routes/servers-api-ping.js",
+    "backend/dist/routes/servers-api-ping.js.map",
+    "backend/dist/routes/servers-api-ping.d.ts",
+    "backend/dist/routes/servers-api-ping.d.ts.map",
+    "backend/dist/routes/servers.js",
+    "backend/dist/routes/servers.js.map",
+    "backend/dist/routes/servers.d.ts",
+    "backend/dist/routes/servers.d.ts.map",
+    "backend/dist/routes/sidebar-counts.js",
+    "backend/dist/routes/sidebar-counts.js.map",
+    "backend/dist/routes/sidebar-counts.d.ts",
+    "backend/dist/routes/sidebar-counts.d.ts.map",
+    "backend/dist/routes/speed-probes-write.js",
+    "backend/dist/routes/speed-probes-write.js.map",
+    "backend/dist/routes/speed-probes-write.d.ts",
+    "backend/dist/routes/speed-probes-write.d.ts.map",
+    "backend/dist/routes/speed-test.js",
+    "backend/dist/routes/speed-test.js.map",
+    "backend/dist/routes/speed-test.d.ts",
+    "backend/dist/routes/speed-test.d.ts.map",
+    "backend/dist/routes/statistics.js",
+    "backend/dist/routes/statistics.js.map",
+    "backend/dist/routes/statistics.d.ts",
+    "backend/dist/routes/statistics.d.ts.map",
+    "backend/dist/routes/system-database.js",
+    "backend/dist/routes/system-database.js.map",
+    "backend/dist/routes/system-database.d.ts",
+    "backend/dist/routes/system-database.d.ts.map",
+    "backend/dist/routes/traffic-flow-purge.js",
+    "backend/dist/routes/traffic-flow-purge.js.map",
+    "backend/dist/routes/traffic-flow-purge.d.ts",
+    "backend/dist/routes/traffic-flow-purge.d.ts.map",
+    "backend/dist/routes/traffic-flow-settings.js",
+    "backend/dist/routes/traffic-flow-settings.js.map",
+    "backend/dist/routes/traffic-flow-settings.d.ts",
+    "backend/dist/routes/traffic-flow-settings.d.ts.map",
+    "backend/dist/routes/traffic-flow.js",
+    "backend/dist/routes/traffic-flow.js.map",
+    "backend/dist/routes/traffic-flow.d.ts",
+    "backend/dist/routes/traffic-flow.d.ts.map",
+    "backend/dist/routes/traffic.js",
+    "backend/dist/routes/traffic.js.map",
+    "backend/dist/routes/traffic.d.ts",
+    "backend/dist/routes/traffic.d.ts.map",
+    "backend/dist/routes/uptime.js",
+    "backend/dist/routes/uptime.js.map",
+    "backend/dist/routes/uptime.d.ts",
+    "backend/dist/routes/uptime.d.ts.map",
+    "backend/dist/routes/users.js",
+    "backend/dist/routes/users.js.map",
+    "backend/dist/routes/users.d.ts",
+    "backend/dist/routes/users.d.ts.map",
+    "backend/dist/routes/vxlan.js",
+    "backend/dist/routes/vxlan.js.map",
+    "backend/dist/routes/vxlan.d.ts",
+    "backend/dist/routes/vxlan.d.ts.map",
+    "backend/dist/routes/wireguard.js",
+    "backend/dist/routes/wireguard.js.map",
+    "backend/dist/routes/wireguard.d.ts",
+    "backend/dist/routes/wireguard.d.ts.map",
+    "backend/dist/scripts/migrate-sqlite-to-pg.js",
+    "backend/dist/scripts/migrate-sqlite-to-pg.js.map",
+    "backend/dist/scripts/migrate-sqlite-to-pg.d.ts",
+    "backend/dist/scripts/migrate-sqlite-to-pg.d.ts.map",
+    "backend/dist/scripts/rebuild-flow-facts.js",
+    "backend/dist/scripts/rebuild-flow-facts.js.map",
+    "backend/dist/scripts/rebuild-flow-facts.d.ts",
+    "backend/dist/scripts/rebuild-flow-facts.d.ts.map",
+    "backend/dist/services/acme-cloudflare.js",
+    "backend/dist/services/acme-cloudflare.js.map",
+    "backend/dist/services/acme-cloudflare.d.ts",
+    "backend/dist/services/acme-cloudflare.d.ts.map",
+    "backend/dist/services/alert-collector-hooks.js",
+    "backend/dist/services/alert-collector-hooks.js.map",
+    "backend/dist/services/alert-collector-hooks.d.ts",
+    "backend/dist/services/alert-collector-hooks.d.ts.map",
+    "backend/dist/services/alert-engine/confirm-stability.js",
+    "backend/dist/services/alert-engine/confirm-stability.js.map",
+    "backend/dist/services/alert-engine/confirm-stability.d.ts",
+    "backend/dist/services/alert-engine/confirm-stability.d.ts.map",
+    "backend/dist/services/alert-engine/cooldown.js",
+    "backend/dist/services/alert-engine/cooldown.js.map",
+    "backend/dist/services/alert-engine/cooldown.d.ts",
+    "backend/dist/services/alert-engine/cooldown.d.ts.map",
+    "backend/dist/services/alert-engine/decision-engine.js",
+    "backend/dist/services/alert-engine/decision-engine.js.map",
+    "backend/dist/services/alert-engine/decision-engine.d.ts",
+    "backend/dist/services/alert-engine/decision-engine.d.ts.map",
+    "backend/dist/services/alert-engine/evaluate-rule.js",
+    "backend/dist/services/alert-engine/evaluate-rule.js.map",
+    "backend/dist/services/alert-engine/evaluate-rule.d.ts",
+    "backend/dist/services/alert-engine/evaluate-rule.d.ts.map",
+    "backend/dist/services/alert-engine/groups.js",
+    "backend/dist/services/alert-engine/groups.js.map",
+    "backend/dist/services/alert-engine/groups.d.ts",
+    "backend/dist/services/alert-engine/groups.d.ts.map",
+    "backend/dist/services/alert-engine/outbox-execution.js",
+    "backend/dist/services/alert-engine/outbox-execution.js.map",
+    "backend/dist/services/alert-engine/outbox-execution.d.ts",
+    "backend/dist/services/alert-engine/outbox-execution.d.ts.map",
+    "backend/dist/services/alert-engine/outbox.js",
+    "backend/dist/services/alert-engine/outbox.js.map",
+    "backend/dist/services/alert-engine/outbox.d.ts",
+    "backend/dist/services/alert-engine/outbox.d.ts.map",
+    "backend/dist/services/alert-engine/prev-live-store.js",
+    "backend/dist/services/alert-engine/prev-live-store.js.map",
+    "backend/dist/services/alert-engine/prev-live-store.d.ts",
+    "backend/dist/services/alert-engine/prev-live-store.d.ts.map",
+    "backend/dist/services/alert-engine/rule-matcher.js",
+    "backend/dist/services/alert-engine/rule-matcher.js.map",
+    "backend/dist/services/alert-engine/rule-matcher.d.ts",
+    "backend/dist/services/alert-engine/rule-matcher.d.ts.map",
+    "backend/dist/services/alert-engine/run-once.js",
+    "backend/dist/services/alert-engine/run-once.js.map",
+    "backend/dist/services/alert-engine/run-once.d.ts",
+    "backend/dist/services/alert-engine/run-once.d.ts.map",
+    "backend/dist/services/alert-engine/signal-ingestor.js",
+    "backend/dist/services/alert-engine/signal-ingestor.js.map",
+    "backend/dist/services/alert-engine/signal-ingestor.d.ts",
+    "backend/dist/services/alert-engine/signal-ingestor.d.ts.map",
+    "backend/dist/services/alert-engine/signals-from-collectors.js",
+    "backend/dist/services/alert-engine/signals-from-collectors.js.map",
+    "backend/dist/services/alert-engine/signals-from-collectors.d.ts",
+    "backend/dist/services/alert-engine/signals-from-collectors.d.ts.map",
+    "backend/dist/services/alert-engine/snapshot.js",
+    "backend/dist/services/alert-engine/snapshot.js.map",
+    "backend/dist/services/alert-engine/snapshot.d.ts",
+    "backend/dist/services/alert-engine/snapshot.d.ts.map",
+    "backend/dist/services/alert-engine/source-watermark.js",
+    "backend/dist/services/alert-engine/source-watermark.js.map",
+    "backend/dist/services/alert-engine/source-watermark.d.ts",
+    "backend/dist/services/alert-engine/source-watermark.d.ts.map",
+    "backend/dist/services/alert-engine/state-machine.js",
+    "backend/dist/services/alert-engine/state-machine.js.map",
+    "backend/dist/services/alert-engine/state-machine.d.ts",
+    "backend/dist/services/alert-engine/state-machine.d.ts.map",
+    "backend/dist/services/alert-engine/telegram-emoji.js",
+    "backend/dist/services/alert-engine/telegram-emoji.js.map",
+    "backend/dist/services/alert-engine/telegram-emoji.d.ts",
+    "backend/dist/services/alert-engine/telegram-emoji.d.ts.map",
+    "backend/dist/services/alert-engine/types.js",
+    "backend/dist/services/alert-engine/types.js.map",
+    "backend/dist/services/alert-engine/types.d.ts",
+    "backend/dist/services/alert-engine/types.d.ts.map",
+    "backend/dist/services/alerts-config-execution.js",
+    "backend/dist/services/alerts-config-execution.js.map",
+    "backend/dist/services/alerts-config-execution.d.ts",
+    "backend/dist/services/alerts-config-execution.d.ts.map",
+    "backend/dist/services/alerts-outbox-overview.js",
+    "backend/dist/services/alerts-outbox-overview.js.map",
+    "backend/dist/services/alerts-outbox-overview.d.ts",
+    "backend/dist/services/alerts-outbox-overview.d.ts.map",
+    "backend/dist/services/alerts-outbox-retry.js",
+    "backend/dist/services/alerts-outbox-retry.js.map",
+    "backend/dist/services/alerts-outbox-retry.d.ts",
+    "backend/dist/services/alerts-outbox-retry.d.ts.map",
+    "backend/dist/services/alerts-overview.js",
+    "backend/dist/services/alerts-overview.js.map",
+    "backend/dist/services/alerts-overview.d.ts",
+    "backend/dist/services/alerts-overview.d.ts.map",
+    "backend/dist/services/alerts-revision.js",
+    "backend/dist/services/alerts-revision.js.map",
+    "backend/dist/services/alerts-revision.d.ts",
+    "backend/dist/services/alerts-revision.d.ts.map",
+    "backend/dist/services/alerts-service.js",
+    "backend/dist/services/alerts-service.js.map",
+    "backend/dist/services/alerts-service.d.ts",
+    "backend/dist/services/alerts-service.d.ts.map",
+    "backend/dist/services/alerts-telegram-delivery.js",
+    "backend/dist/services/alerts-telegram-delivery.js.map",
+    "backend/dist/services/alerts-telegram-delivery.d.ts",
+    "backend/dist/services/alerts-telegram-delivery.d.ts.map",
+    "backend/dist/services/alerts-telegram-send.js",
+    "backend/dist/services/alerts-telegram-send.js.map",
+    "backend/dist/services/alerts-telegram-send.d.ts",
+    "backend/dist/services/alerts-telegram-send.d.ts.map",
+    "backend/dist/services/alerts-telegram-settings.js",
+    "backend/dist/services/alerts-telegram-settings.js.map",
+    "backend/dist/services/alerts-telegram-settings.d.ts",
+    "backend/dist/services/alerts-telegram-settings.d.ts.map",
+    "backend/dist/services/backup-deletion.js",
+    "backend/dist/services/backup-deletion.js.map",
+    "backend/dist/services/backup-deletion.d.ts",
+    "backend/dist/services/backup-deletion.d.ts.map",
+    "backend/dist/services/backup-dto.js",
+    "backend/dist/services/backup-dto.js.map",
+    "backend/dist/services/backup-dto.d.ts",
+    "backend/dist/services/backup-dto.d.ts.map",
+    "backend/dist/services/backup-job-execution.js",
+    "backend/dist/services/backup-job-execution.js.map",
+    "backend/dist/services/backup-job-execution.d.ts",
+    "backend/dist/services/backup-job-execution.d.ts.map",
+    "backend/dist/services/backup-prune.js",
+    "backend/dist/services/backup-prune.js.map",
+    "backend/dist/services/backup-prune.d.ts",
+    "backend/dist/services/backup-prune.d.ts.map",
+    "backend/dist/services/backup-restore.js",
+    "backend/dist/services/backup-restore.js.map",
+    "backend/dist/services/backup-restore.d.ts",
+    "backend/dist/services/backup-restore.d.ts.map",
+    "backend/dist/services/backup-scheduler-collector.js",
+    "backend/dist/services/backup-scheduler-collector.js.map",
+    "backend/dist/services/backup-scheduler-collector.d.ts",
+    "backend/dist/services/backup-scheduler-collector.d.ts.map",
+    "backend/dist/services/backup-scheduler-run.js",
+    "backend/dist/services/backup-scheduler-run.js.map",
+    "backend/dist/services/backup-scheduler-run.d.ts",
+    "backend/dist/services/backup-scheduler-run.d.ts.map",
+    "backend/dist/services/backup-service.js",
+    "backend/dist/services/backup-service.js.map",
+    "backend/dist/services/backup-service.d.ts",
+    "backend/dist/services/backup-service.d.ts.map",
+    "backend/dist/services/backup-storage-update.js",
+    "backend/dist/services/backup-storage-update.js.map",
+    "backend/dist/services/backup-storage-update.d.ts",
+    "backend/dist/services/backup-storage-update.d.ts.map",
+    "backend/dist/services/bandwidth-test-rates.js",
+    "backend/dist/services/bandwidth-test-rates.js.map",
+    "backend/dist/services/bandwidth-test-rates.d.ts",
+    "backend/dist/services/bandwidth-test-rates.d.ts.map",
+    "backend/dist/services/bandwidth-test-status.js",
+    "backend/dist/services/bandwidth-test-status.js.map",
+    "backend/dist/services/bandwidth-test-status.d.ts",
+    "backend/dist/services/bandwidth-test-status.d.ts.map",
+    "backend/dist/services/bgp-catalog-poll.js",
+    "backend/dist/services/bgp-catalog-poll.js.map",
+    "backend/dist/services/bgp-catalog-poll.d.ts",
+    "backend/dist/services/bgp-catalog-poll.d.ts.map",
+    "backend/dist/services/bgp-parse-sessions.js",
+    "backend/dist/services/bgp-parse-sessions.js.map",
+    "backend/dist/services/bgp-parse-sessions.d.ts",
+    "backend/dist/services/bgp-parse-sessions.d.ts.map",
+    "backend/dist/services/bgp-peers-live.js",
+    "backend/dist/services/bgp-peers-live.js.map",
+    "backend/dist/services/bgp-peers-live.d.ts",
+    "backend/dist/services/bgp-peers-live.d.ts.map",
+    "backend/dist/services/btest-node-locks.js",
+    "backend/dist/services/btest-node-locks.js.map",
+    "backend/dist/services/btest-node-locks.d.ts",
+    "backend/dist/services/btest-node-locks.d.ts.map",
+    "backend/dist/services/certificate-issue-dto.js",
+    "backend/dist/services/certificate-issue-dto.js.map",
+    "backend/dist/services/certificate-issue-dto.d.ts",
+    "backend/dist/services/certificate-issue-dto.d.ts.map",
+    "backend/dist/services/certificate-issue-execution.js",
+    "backend/dist/services/certificate-issue-execution.js.map",
+    "backend/dist/services/certificate-issue-execution.d.ts",
+    "backend/dist/services/certificate-issue-execution.d.ts.map",
+    "backend/dist/services/certificate-issue-request.js",
+    "backend/dist/services/certificate-issue-request.js.map",
+    "backend/dist/services/certificate-issue-request.d.ts",
+    "backend/dist/services/certificate-issue-request.d.ts.map",
+    "backend/dist/services/certificate-issue-runner.js",
+    "backend/dist/services/certificate-issue-runner.js.map",
+    "backend/dist/services/certificate-issue-runner.d.ts",
+    "backend/dist/services/certificate-issue-runner.d.ts.map",
+    "backend/dist/services/certificate-parse.js",
+    "backend/dist/services/certificate-parse.js.map",
+    "backend/dist/services/certificate-parse.d.ts",
+    "backend/dist/services/certificate-parse.d.ts.map",
+    "backend/dist/services/certificate-renew-collector.js",
+    "backend/dist/services/certificate-renew-collector.js.map",
+    "backend/dist/services/certificate-renew-collector.d.ts",
+    "backend/dist/services/certificate-renew-collector.d.ts.map",
+    "backend/dist/services/certificates-service.js",
+    "backend/dist/services/certificates-service.js.map",
+    "backend/dist/services/certificates-service.d.ts",
+    "backend/dist/services/certificates-service.d.ts.map",
+    "backend/dist/services/certificates-state.js",
+    "backend/dist/services/certificates-state.js.map",
+    "backend/dist/services/certificates-state.d.ts",
+    "backend/dist/services/certificates-state.d.ts.map",
+    "backend/dist/services/complete-count.js",
+    "backend/dist/services/complete-count.js.map",
+    "backend/dist/services/complete-count.d.ts",
+    "backend/dist/services/complete-count.d.ts.map",
+    "backend/dist/services/config-apply-plan.js",
+    "backend/dist/services/config-apply-plan.js.map",
+    "backend/dist/services/config-apply-plan.d.ts",
+    "backend/dist/services/config-apply-plan.d.ts.map",
+    "backend/dist/services/config-revisions.js",
+    "backend/dist/services/config-revisions.js.map",
+    "backend/dist/services/config-revisions.d.ts",
+    "backend/dist/services/config-revisions.d.ts.map",
+    "backend/dist/services/containers-live.js",
+    "backend/dist/services/containers-live.js.map",
+    "backend/dist/services/containers-live.d.ts",
+    "backend/dist/services/containers-live.d.ts.map",
+    "backend/dist/services/containers-state.js",
+    "backend/dist/services/containers-state.js.map",
+    "backend/dist/services/containers-state.d.ts",
+    "backend/dist/services/containers-state.d.ts.map",
+    "backend/dist/services/database-background-work.js",
+    "backend/dist/services/database-background-work.js.map",
+    "backend/dist/services/database-background-work.d.ts",
+    "backend/dist/services/database-background-work.d.ts.map",
+    "backend/dist/services/database-request-gate.js",
+    "backend/dist/services/database-request-gate.js.map",
+    "backend/dist/services/database-request-gate.d.ts",
+    "backend/dist/services/database-request-gate.d.ts.map",
+    "backend/dist/services/entity-snapshots.js",
+    "backend/dist/services/entity-snapshots.js.map",
+    "backend/dist/services/entity-snapshots.d.ts",
+    "backend/dist/services/entity-snapshots.d.ts.map",
+    "backend/dist/services/evobgp-catalog.js",
+    "backend/dist/services/evobgp-catalog.js.map",
+    "backend/dist/services/evobgp-catalog.d.ts",
+    "backend/dist/services/evobgp-catalog.d.ts.map",
+    "backend/dist/services/firewall-live.js",
+    "backend/dist/services/firewall-live.js.map",
+    "backend/dist/services/firewall-live.d.ts",
+    "backend/dist/services/firewall-live.d.ts.map",
+    "backend/dist/services/firewall-poll.js",
+    "backend/dist/services/firewall-poll.js.map",
+    "backend/dist/services/firewall-poll.d.ts",
+    "backend/dist/services/firewall-poll.d.ts.map",
+    "backend/dist/services/geoip-settings.js",
+    "backend/dist/services/geoip-settings.js.map",
+    "backend/dist/services/geoip-settings.d.ts",
+    "backend/dist/services/geoip-settings.d.ts.map",
+    "backend/dist/services/geoip-update-collector.js",
+    "backend/dist/services/geoip-update-collector.js.map",
+    "backend/dist/services/geoip-update-collector.d.ts",
+    "backend/dist/services/geoip-update-collector.d.ts.map",
+    "backend/dist/services/gre-bgp-snapshot-collector.js",
+    "backend/dist/services/gre-bgp-snapshot-collector.js.map",
+    "backend/dist/services/gre-bgp-snapshot-collector.d.ts",
+    "backend/dist/services/gre-bgp-snapshot-collector.d.ts.map",
+    "backend/dist/services/gre-catalog-poll.js",
+    "backend/dist/services/gre-catalog-poll.js.map",
+    "backend/dist/services/gre-catalog-poll.d.ts",
+    "backend/dist/services/gre-catalog-poll.d.ts.map",
+    "backend/dist/services/gre-comment.js",
+    "backend/dist/services/gre-comment.js.map",
+    "backend/dist/services/gre-comment.d.ts",
+    "backend/dist/services/gre-comment.d.ts.map",
+    "backend/dist/services/gre-live.js",
+    "backend/dist/services/gre-live.js.map",
+    "backend/dist/services/gre-live.d.ts",
+    "backend/dist/services/gre-live.d.ts.map",
+    "backend/dist/services/gre-tunnels-live.js",
+    "backend/dist/services/gre-tunnels-live.js.map",
+    "backend/dist/services/gre-tunnels-live.d.ts",
+    "backend/dist/services/gre-tunnels-live.d.ts.map",
+    "backend/dist/services/internet-path-collector.js",
+    "backend/dist/services/internet-path-collector.js.map",
+    "backend/dist/services/internet-path-collector.d.ts",
+    "backend/dist/services/internet-path-collector.d.ts.map",
+    "backend/dist/services/internet-path-snapshot.js",
+    "backend/dist/services/internet-path-snapshot.js.map",
+    "backend/dist/services/internet-path-snapshot.d.ts",
+    "backend/dist/services/internet-path-snapshot.d.ts.map",
+    "backend/dist/services/ipsec-ca.js",
+    "backend/dist/services/ipsec-ca.js.map",
+    "backend/dist/services/ipsec-ca.d.ts",
+    "backend/dist/services/ipsec-ca.d.ts.map",
+    "backend/dist/services/ipsec-certificate-dn.js",
+    "backend/dist/services/ipsec-certificate-dn.js.map",
+    "backend/dist/services/ipsec-certificate-dn.d.ts",
+    "backend/dist/services/ipsec-certificate-dn.d.ts.map",
+    "backend/dist/services/ipsec-cleanup.js",
+    "backend/dist/services/ipsec-cleanup.js.map",
+    "backend/dist/services/ipsec-cleanup.d.ts",
+    "backend/dist/services/ipsec-cleanup.d.ts.map",
+    "backend/dist/services/ipsec-config.js",
+    "backend/dist/services/ipsec-config.js.map",
+    "backend/dist/services/ipsec-config.d.ts",
+    "backend/dist/services/ipsec-config.d.ts.map",
+    "backend/dist/services/ipsec-live.js",
+    "backend/dist/services/ipsec-live.js.map",
+    "backend/dist/services/ipsec-live.d.ts",
+    "backend/dist/services/ipsec-live.d.ts.map",
+    "backend/dist/services/ipsec-operation.js",
+    "backend/dist/services/ipsec-operation.js.map",
+    "backend/dist/services/ipsec-operation.d.ts",
+    "backend/dist/services/ipsec-operation.d.ts.map",
+    "backend/dist/services/ipsec-ros.js",
+    "backend/dist/services/ipsec-ros.js.map",
+    "backend/dist/services/ipsec-ros.d.ts",
+    "backend/dist/services/ipsec-ros.d.ts.map",
+    "backend/dist/services/mikrotik.js",
+    "backend/dist/services/mikrotik.js.map",
+    "backend/dist/services/mikrotik.d.ts",
+    "backend/dist/services/mikrotik.d.ts.map",
+    "backend/dist/services/monitoring-server-catalog.js",
+    "backend/dist/services/monitoring-server-catalog.js.map",
+    "backend/dist/services/monitoring-server-catalog.d.ts",
+    "backend/dist/services/monitoring-server-catalog.d.ts.map",
+    "backend/dist/services/ospf-catalog-poll.js",
+    "backend/dist/services/ospf-catalog-poll.js.map",
+    "backend/dist/services/ospf-catalog-poll.d.ts",
+    "backend/dist/services/ospf-catalog-poll.d.ts.map",
+    "backend/dist/services/ospf-effective-disabled.js",
+    "backend/dist/services/ospf-effective-disabled.js.map",
+    "backend/dist/services/ospf-effective-disabled.d.ts",
+    "backend/dist/services/ospf-effective-disabled.d.ts.map",
+    "backend/dist/services/ospf-observed-values.js",
+    "backend/dist/services/ospf-observed-values.js.map",
+    "backend/dist/services/ospf-observed-values.d.ts",
+    "backend/dist/services/ospf-observed-values.d.ts.map",
+    "backend/dist/services/ospf-optimizer-identity.js",
+    "backend/dist/services/ospf-optimizer-identity.js.map",
+    "backend/dist/services/ospf-optimizer-identity.d.ts",
+    "backend/dist/services/ospf-optimizer-identity.d.ts.map",
+    "backend/dist/services/ospf-optimizer-metrics.js",
+    "backend/dist/services/ospf-optimizer-metrics.js.map",
+    "backend/dist/services/ospf-optimizer-metrics.d.ts",
+    "backend/dist/services/ospf-optimizer-metrics.d.ts.map",
+    "backend/dist/services/ospf-optimizer-plan.js",
+    "backend/dist/services/ospf-optimizer-plan.js.map",
+    "backend/dist/services/ospf-optimizer-plan.d.ts",
+    "backend/dist/services/ospf-optimizer-plan.d.ts.map",
+    "backend/dist/services/ospf-route-parse.js",
+    "backend/dist/services/ospf-route-parse.js.map",
+    "backend/dist/services/ospf-route-parse.d.ts",
+    "backend/dist/services/ospf-route-parse.d.ts.map",
+    "backend/dist/services/ping-probe-replacement.js",
+    "backend/dist/services/ping-probe-replacement.js.map",
+    "backend/dist/services/ping-probe-replacement.d.ts",
+    "backend/dist/services/ping-probe-replacement.d.ts.map",
+    "backend/dist/services/poller.js",
+    "backend/dist/services/poller.js.map",
+    "backend/dist/services/poller.d.ts",
+    "backend/dist/services/poller.d.ts.map",
+    "backend/dist/services/recursive-apply.js",
+    "backend/dist/services/recursive-apply.js.map",
+    "backend/dist/services/recursive-apply.d.ts",
+    "backend/dist/services/recursive-apply.d.ts.map",
+    "backend/dist/services/recursive-route-catalog.js",
+    "backend/dist/services/recursive-route-catalog.js.map",
+    "backend/dist/services/recursive-route-catalog.d.ts",
+    "backend/dist/services/recursive-route-catalog.d.ts.map",
+    "backend/dist/services/recursive-route-validation.js",
+    "backend/dist/services/recursive-route-validation.js.map",
+    "backend/dist/services/recursive-route-validation.d.ts",
+    "backend/dist/services/recursive-route-validation.d.ts.map",
+    "backend/dist/services/ros-metric-parse.js",
+    "backend/dist/services/ros-metric-parse.js.map",
+    "backend/dist/services/ros-metric-parse.d.ts",
+    "backend/dist/services/ros-metric-parse.d.ts.map",
+    "backend/dist/services/ros-ops.js",
+    "backend/dist/services/ros-ops.js.map",
+    "backend/dist/services/ros-ops.d.ts",
+    "backend/dist/services/ros-ops.d.ts.map",
+    "backend/dist/services/s3-backup-client.js",
+    "backend/dist/services/s3-backup-client.js.map",
+    "backend/dist/services/s3-backup-client.d.ts",
+    "backend/dist/services/s3-backup-client.d.ts.map",
+    "backend/dist/services/scheduler-recorded-run.js",
+    "backend/dist/services/scheduler-recorded-run.js.map",
+    "backend/dist/services/scheduler-recorded-run.d.ts",
+    "backend/dist/services/scheduler-recorded-run.d.ts.map",
+    "backend/dist/services/scheduler-running.js",
+    "backend/dist/services/scheduler-running.js.map",
+    "backend/dist/services/scheduler-running.d.ts",
+    "backend/dist/services/scheduler-running.d.ts.map",
+    "backend/dist/services/scheduler.js",
+    "backend/dist/services/scheduler.js.map",
+    "backend/dist/services/scheduler.d.ts",
+    "backend/dist/services/scheduler.d.ts.map",
+    "backend/dist/services/serial-operation.js",
+    "backend/dist/services/serial-operation.js.map",
+    "backend/dist/services/serial-operation.d.ts",
+    "backend/dist/services/serial-operation.d.ts.map",
+    "backend/dist/services/servers-rest-ping-collector.js",
+    "backend/dist/services/servers-rest-ping-collector.js.map",
+    "backend/dist/services/servers-rest-ping-collector.d.ts",
+    "backend/dist/services/servers-rest-ping-collector.d.ts.map",
+    "backend/dist/services/speed-history-dto.js",
+    "backend/dist/services/speed-history-dto.js.map",
+    "backend/dist/services/speed-history-dto.d.ts",
+    "backend/dist/services/speed-history-dto.d.ts.map",
+    "backend/dist/services/speed-probe-dto.js",
+    "backend/dist/services/speed-probe-dto.js.map",
+    "backend/dist/services/speed-probe-dto.d.ts",
+    "backend/dist/services/speed-probe-dto.d.ts.map",
+    "backend/dist/services/speed-probe-replacement.js",
+    "backend/dist/services/speed-probe-replacement.js.map",
+    "backend/dist/services/speed-probe-replacement.d.ts",
+    "backend/dist/services/speed-probe-replacement.d.ts.map",
+    "backend/dist/services/speed-run-error-message.js",
+    "backend/dist/services/speed-run-error-message.js.map",
+    "backend/dist/services/speed-run-error-message.d.ts",
+    "backend/dist/services/speed-run-error-message.d.ts.map",
+    "backend/dist/services/speed-run-persistence.js",
+    "backend/dist/services/speed-run-persistence.js.map",
+    "backend/dist/services/speed-run-persistence.d.ts",
+    "backend/dist/services/speed-run-persistence.d.ts.map",
+    "backend/dist/services/statistics-aggregate.js",
+    "backend/dist/services/statistics-aggregate.js.map",
+    "backend/dist/services/statistics-aggregate.d.ts",
+    "backend/dist/services/statistics-aggregate.d.ts.map",
+    "backend/dist/services/system-database-backup.js",
+    "backend/dist/services/system-database-backup.js.map",
+    "backend/dist/services/system-database-backup.d.ts",
+    "backend/dist/services/system-database-backup.d.ts.map",
+    "backend/dist/services/system-database-cache.js",
+    "backend/dist/services/system-database-cache.js.map",
+    "backend/dist/services/system-database-cache.d.ts",
+    "backend/dist/services/system-database-cache.d.ts.map",
+    "backend/dist/services/system-database-operation.js",
+    "backend/dist/services/system-database-operation.js.map",
+    "backend/dist/services/system-database-operation.d.ts",
+    "backend/dist/services/system-database-operation.d.ts.map",
+    "backend/dist/services/system-database-partition-restore.js",
+    "backend/dist/services/system-database-partition-restore.js.map",
+    "backend/dist/services/system-database-partition-restore.d.ts",
+    "backend/dist/services/system-database-partition-restore.d.ts.map",
+    "backend/dist/services/system-database-restore-execution.js",
+    "backend/dist/services/system-database-restore-execution.js.map",
+    "backend/dist/services/system-database-restore-execution.d.ts",
+    "backend/dist/services/system-database-restore-execution.d.ts.map",
+    "backend/dist/services/traffic-collector.js",
+    "backend/dist/services/traffic-collector.js.map",
+    "backend/dist/services/traffic-collector.d.ts",
+    "backend/dist/services/traffic-collector.d.ts.map",
+    "backend/dist/services/traffic-flow-analytics.js",
+    "backend/dist/services/traffic-flow-analytics.js.map",
+    "backend/dist/services/traffic-flow-analytics.d.ts",
+    "backend/dist/services/traffic-flow-analytics.d.ts.map",
+    "backend/dist/services/traffic-flow-apps.js",
+    "backend/dist/services/traffic-flow-apps.js.map",
+    "backend/dist/services/traffic-flow-apps.d.ts",
+    "backend/dist/services/traffic-flow-apps.d.ts.map",
+    "backend/dist/services/traffic-flow-brands.js",
+    "backend/dist/services/traffic-flow-brands.js.map",
+    "backend/dist/services/traffic-flow-brands.d.ts",
+    "backend/dist/services/traffic-flow-brands.d.ts.map",
+    "backend/dist/services/traffic-flow-classify.js",
+    "backend/dist/services/traffic-flow-classify.js.map",
+    "backend/dist/services/traffic-flow-classify.d.ts",
+    "backend/dist/services/traffic-flow-classify.d.ts.map",
+    "backend/dist/services/traffic-flow-collector-ipc.js",
+    "backend/dist/services/traffic-flow-collector-ipc.js.map",
+    "backend/dist/services/traffic-flow-collector-ipc.d.ts",
+    "backend/dist/services/traffic-flow-collector-ipc.d.ts.map",
+    "backend/dist/services/traffic-flow-collector-worker.js",
+    "backend/dist/services/traffic-flow-collector-worker.js.map",
+    "backend/dist/services/traffic-flow-collector-worker.d.ts",
+    "backend/dist/services/traffic-flow-collector-worker.d.ts.map",
+    "backend/dist/services/traffic-flow-dedup.js",
+    "backend/dist/services/traffic-flow-dedup.js.map",
+    "backend/dist/services/traffic-flow-dedup.d.ts",
+    "backend/dist/services/traffic-flow-dedup.d.ts.map",
+    "backend/dist/services/traffic-flow-dest.js",
+    "backend/dist/services/traffic-flow-dest.js.map",
+    "backend/dist/services/traffic-flow-dest.d.ts",
+    "backend/dist/services/traffic-flow-dest.d.ts.map",
+    "backend/dist/services/traffic-flow-engine.js",
+    "backend/dist/services/traffic-flow-engine.js.map",
+    "backend/dist/services/traffic-flow-engine.d.ts",
+    "backend/dist/services/traffic-flow-engine.d.ts.map",
+    "backend/dist/services/traffic-flow-facts-filter.js",
+    "backend/dist/services/traffic-flow-facts-filter.js.map",
+    "backend/dist/services/traffic-flow-facts-filter.d.ts",
+    "backend/dist/services/traffic-flow-facts-filter.d.ts.map",
+    "backend/dist/services/traffic-flow-facts-rebuild.js",
+    "backend/dist/services/traffic-flow-facts-rebuild.js.map",
+    "backend/dist/services/traffic-flow-facts-rebuild.d.ts",
+    "backend/dist/services/traffic-flow-facts-rebuild.d.ts.map",
+    "backend/dist/services/traffic-flow-facts.js",
+    "backend/dist/services/traffic-flow-facts.js.map",
+    "backend/dist/services/traffic-flow-facts.d.ts",
+    "backend/dist/services/traffic-flow-facts.d.ts.map",
+    "backend/dist/services/traffic-flow-geoip.js",
+    "backend/dist/services/traffic-flow-geoip.js.map",
+    "backend/dist/services/traffic-flow-geoip.d.ts",
+    "backend/dist/services/traffic-flow-geoip.d.ts.map",
+    "backend/dist/services/traffic-flow-host-file-builders.js",
+    "backend/dist/services/traffic-flow-host-file-builders.js.map",
+    "backend/dist/services/traffic-flow-host-file-builders.d.ts",
+    "backend/dist/services/traffic-flow-host-file-builders.d.ts.map",
+    "backend/dist/services/traffic-flow-host-files.js",
+    "backend/dist/services/traffic-flow-host-files.js.map",
+    "backend/dist/services/traffic-flow-host-files.d.ts",
+    "backend/dist/services/traffic-flow-host-files.d.ts.map",
+    "backend/dist/services/traffic-flow-ifaces.js",
+    "backend/dist/services/traffic-flow-ifaces.js.map",
+    "backend/dist/services/traffic-flow-ifaces.d.ts",
+    "backend/dist/services/traffic-flow-ifaces.d.ts.map",
+    "backend/dist/services/traffic-flow-ifindex.js",
+    "backend/dist/services/traffic-flow-ifindex.js.map",
+    "backend/dist/services/traffic-flow-ifindex.d.ts",
+    "backend/dist/services/traffic-flow-ifindex.d.ts.map",
+    "backend/dist/services/traffic-flow-ingest.js",
+    "backend/dist/services/traffic-flow-ingest.js.map",
+    "backend/dist/services/traffic-flow-ingest.d.ts",
+    "backend/dist/services/traffic-flow-ingest.d.ts.map",
+    "backend/dist/services/traffic-flow-ip.js",
+    "backend/dist/services/traffic-flow-ip.js.map",
+    "backend/dist/services/traffic-flow-ip.d.ts",
+    "backend/dist/services/traffic-flow-ip.d.ts.map",
+    "backend/dist/services/traffic-flow-key-execution.js",
+    "backend/dist/services/traffic-flow-key-execution.js.map",
+    "backend/dist/services/traffic-flow-key-execution.d.ts",
+    "backend/dist/services/traffic-flow-key-execution.d.ts.map",
+    "backend/dist/services/traffic-flow-map-exporter.js",
+    "backend/dist/services/traffic-flow-map-exporter.js.map",
+    "backend/dist/services/traffic-flow-map-exporter.d.ts",
+    "backend/dist/services/traffic-flow-map-exporter.d.ts.map",
+    "backend/dist/services/traffic-flow-map-hops.js",
+    "backend/dist/services/traffic-flow-map-hops.js.map",
+    "backend/dist/services/traffic-flow-map-hops.d.ts",
+    "backend/dist/services/traffic-flow-map-hops.d.ts.map",
+    "backend/dist/services/traffic-flow-overlay.js",
+    "backend/dist/services/traffic-flow-overlay.js.map",
+    "backend/dist/services/traffic-flow-overlay.d.ts",
+    "backend/dist/services/traffic-flow-overlay.d.ts.map",
+    "backend/dist/services/traffic-flow-parse.js",
+    "backend/dist/services/traffic-flow-parse.js.map",
+    "backend/dist/services/traffic-flow-parse.d.ts",
+    "backend/dist/services/traffic-flow-parse.d.ts.map",
+    "backend/dist/services/traffic-flow-planes.js",
+    "backend/dist/services/traffic-flow-planes.js.map",
+    "backend/dist/services/traffic-flow-planes.d.ts",
+    "backend/dist/services/traffic-flow-planes.d.ts.map",
+    "backend/dist/services/traffic-flow-purge-execution.js",
+    "backend/dist/services/traffic-flow-purge-execution.js.map",
+    "backend/dist/services/traffic-flow-purge-execution.d.ts",
+    "backend/dist/services/traffic-flow-purge-execution.d.ts.map",
+    "backend/dist/services/traffic-flow-ripe.js",
+    "backend/dist/services/traffic-flow-ripe.js.map",
+    "backend/dist/services/traffic-flow-ripe.d.ts",
+    "backend/dist/services/traffic-flow-ripe.d.ts.map",
+    "backend/dist/services/traffic-flow-settings.js",
+    "backend/dist/services/traffic-flow-settings.js.map",
+    "backend/dist/services/traffic-flow-settings.d.ts",
+    "backend/dist/services/traffic-flow-settings.d.ts.map",
+    "backend/dist/services/traffic-flow-topology.js",
+    "backend/dist/services/traffic-flow-topology.js.map",
+    "backend/dist/services/traffic-flow-topology.d.ts",
+    "backend/dist/services/traffic-flow-topology.d.ts.map",
+    "backend/dist/services/traffic-flow-worker-shutdown.js",
+    "backend/dist/services/traffic-flow-worker-shutdown.js.map",
+    "backend/dist/services/traffic-flow-worker-shutdown.d.ts",
+    "backend/dist/services/traffic-flow-worker-shutdown.d.ts.map",
+    "backend/dist/services/traffic-rate.js",
+    "backend/dist/services/traffic-rate.js.map",
+    "backend/dist/services/traffic-rate.d.ts",
+    "backend/dist/services/traffic-rate.d.ts.map",
+    "backend/dist/services/traffic-users.js",
+    "backend/dist/services/traffic-users.js.map",
+    "backend/dist/services/traffic-users.d.ts",
+    "backend/dist/services/traffic-users.d.ts.map",
+    "backend/dist/services/uptime-collector.js",
+    "backend/dist/services/uptime-collector.js.map",
+    "backend/dist/services/uptime-collector.d.ts",
+    "backend/dist/services/uptime-collector.d.ts.map",
+    "backend/dist/services/uptime-probe-observations.js",
+    "backend/dist/services/uptime-probe-observations.js.map",
+    "backend/dist/services/uptime-probe-observations.d.ts",
+    "backend/dist/services/uptime-probe-observations.d.ts.map",
+    "backend/dist/services/uptime-speed-service.js",
+    "backend/dist/services/uptime-speed-service.js.map",
+    "backend/dist/services/uptime-speed-service.d.ts",
+    "backend/dist/services/uptime-speed-service.d.ts.map",
+    "backend/dist/services/vxlan-live.js",
+    "backend/dist/services/vxlan-live.js.map",
+    "backend/dist/services/vxlan-live.d.ts",
+    "backend/dist/services/vxlan-live.d.ts.map",
+    "backend/dist/services/wg-keys.js",
+    "backend/dist/services/wg-keys.js.map",
+    "backend/dist/services/wg-keys.d.ts",
+    "backend/dist/services/wg-keys.d.ts.map",
+    "backend/dist/services/wireguard-config.js",
+    "backend/dist/services/wireguard-config.js.map",
+    "backend/dist/services/wireguard-config.d.ts",
+    "backend/dist/services/wireguard-config.d.ts.map",
+    "backend/dist/services/wireguard-delete.js",
+    "backend/dist/services/wireguard-delete.js.map",
+    "backend/dist/services/wireguard-delete.d.ts",
+    "backend/dist/services/wireguard-delete.d.ts.map",
+    "backend/dist/services/wireguard-import-apply.js",
+    "backend/dist/services/wireguard-import-apply.js.map",
+    "backend/dist/services/wireguard-import-apply.d.ts",
+    "backend/dist/services/wireguard-import-apply.d.ts.map",
+    "backend/dist/services/wireguard-import-revision.js",
+    "backend/dist/services/wireguard-import-revision.js.map",
+    "backend/dist/services/wireguard-import-revision.d.ts",
+    "backend/dist/services/wireguard-import-revision.d.ts.map",
+    "backend/dist/services/wireguard-import.js",
+    "backend/dist/services/wireguard-import.js.map",
+    "backend/dist/services/wireguard-import.d.ts",
+    "backend/dist/services/wireguard-import.d.ts.map",
+    "backend/dist/services/wireguard-live.js",
+    "backend/dist/services/wireguard-live.js.map",
+    "backend/dist/services/wireguard-live.d.ts",
+    "backend/dist/services/wireguard-live.d.ts.map",
+    "backend/dist/services/wireguard-observed-values.js",
+    "backend/dist/services/wireguard-observed-values.js.map",
+    "backend/dist/services/wireguard-observed-values.d.ts",
+    "backend/dist/services/wireguard-observed-values.d.ts.map",
+    "backend/dist/services/wireguard-ros.js",
+    "backend/dist/services/wireguard-ros.js.map",
+    "backend/dist/services/wireguard-ros.d.ts",
+    "backend/dist/services/wireguard-ros.d.ts.map",
+    "backend/dist/test/pg.js",
+    "backend/dist/test/pg.js.map",
+    "backend/dist/test/pg.d.ts",
+    "backend/dist/test/pg.d.ts.map",
+    "backend/dist/types/scheduler-run-snapshot.js",
+    "backend/dist/types/scheduler-run-snapshot.js.map",
+    "backend/dist/types/scheduler-run-snapshot.d.ts",
+    "backend/dist/types/scheduler-run-snapshot.d.ts.map",
+    "backend/dist/types/server.js",
+    "backend/dist/types/server.js.map",
+    "backend/dist/types/server.d.ts",
+    "backend/dist/types/server.d.ts.map",
+    "backend/dist/utils/abort-signals.js",
+    "backend/dist/utils/abort-signals.js.map",
+    "backend/dist/utils/abort-signals.d.ts",
+    "backend/dist/utils/abort-signals.d.ts.map",
+    "backend/dist/utils/ros-src-address.js",
+    "backend/dist/utils/ros-src-address.js.map",
+    "backend/dist/utils/ros-src-address.d.ts",
+    "backend/dist/utils/ros-src-address.d.ts.map",
+    "backend/dist/utils/server-id.js",
+    "backend/dist/utils/server-id.js.map",
+    "backend/dist/utils/server-id.d.ts",
+    "backend/dist/utils/server-id.d.ts.map",
+    "packages/contracts/dist/alerts.js",
+    "packages/contracts/dist/alerts.js.map",
+    "packages/contracts/dist/alerts.d.ts",
+    "packages/contracts/dist/alerts.d.ts.map",
+    "packages/contracts/dist/backups.js",
+    "packages/contracts/dist/backups.js.map",
+    "packages/contracts/dist/backups.d.ts",
+    "packages/contracts/dist/backups.d.ts.map",
+    "packages/contracts/dist/certificates.js",
+    "packages/contracts/dist/certificates.js.map",
+    "packages/contracts/dist/certificates.d.ts",
+    "packages/contracts/dist/certificates.d.ts.map",
+    "packages/contracts/dist/containers.js",
+    "packages/contracts/dist/containers.js.map",
+    "packages/contracts/dist/containers.d.ts",
+    "packages/contracts/dist/containers.d.ts.map",
+    "packages/contracts/dist/events.js",
+    "packages/contracts/dist/events.js.map",
+    "packages/contracts/dist/events.d.ts",
+    "packages/contracts/dist/events.d.ts.map",
+    "packages/contracts/dist/evobgp.js",
+    "packages/contracts/dist/evobgp.js.map",
+    "packages/contracts/dist/evobgp.d.ts",
+    "packages/contracts/dist/evobgp.d.ts.map",
+    "packages/contracts/dist/geoip.js",
+    "packages/contracts/dist/geoip.js.map",
+    "packages/contracts/dist/geoip.d.ts",
+    "packages/contracts/dist/geoip.d.ts.map",
+    "packages/contracts/dist/index.js",
+    "packages/contracts/dist/index.js.map",
+    "packages/contracts/dist/index.d.ts",
+    "packages/contracts/dist/index.d.ts.map",
+    "packages/contracts/dist/ipsec.js",
+    "packages/contracts/dist/ipsec.js.map",
+    "packages/contracts/dist/ipsec.d.ts",
+    "packages/contracts/dist/ipsec.d.ts.map",
+    "packages/contracts/dist/ospf-optimizer.js",
+    "packages/contracts/dist/ospf-optimizer.js.map",
+    "packages/contracts/dist/ospf-optimizer.d.ts",
+    "packages/contracts/dist/ospf-optimizer.d.ts.map",
+    "packages/contracts/dist/servers.js",
+    "packages/contracts/dist/servers.js.map",
+    "packages/contracts/dist/servers.d.ts",
+    "packages/contracts/dist/servers.d.ts.map",
+    "packages/contracts/dist/statistics.js",
+    "packages/contracts/dist/statistics.js.map",
+    "packages/contracts/dist/statistics.d.ts",
+    "packages/contracts/dist/statistics.d.ts.map",
+    "packages/contracts/dist/traffic-flow.js",
+    "packages/contracts/dist/traffic-flow.js.map",
+    "packages/contracts/dist/traffic-flow.d.ts",
+    "packages/contracts/dist/traffic-flow.d.ts.map",
+    "packages/contracts/dist/uptime-probes.js",
+    "packages/contracts/dist/uptime-probes.js.map",
+    "packages/contracts/dist/uptime-probes.d.ts",
+    "packages/contracts/dist/uptime-probes.d.ts.map",
+    "packages/contracts/dist/uptime-speed.js",
+    "packages/contracts/dist/uptime-speed.js.map",
+    "packages/contracts/dist/uptime-speed.d.ts",
+    "packages/contracts/dist/uptime-speed.d.ts.map",
+    "packages/contracts/dist/users.js",
+    "packages/contracts/dist/users.js.map",
+    "packages/contracts/dist/users.d.ts",
+    "packages/contracts/dist/users.d.ts.map",
+    "packages/contracts/dist/wireguard.js",
+    "packages/contracts/dist/wireguard.js.map",
+    "packages/contracts/dist/wireguard.d.ts",
+    "packages/contracts/dist/wireguard.d.ts.map"
+  ],
+  "missing": [],
+  "different": []
+}
@@ -0,0 +1,18 @@
+{
+  "date": "2026-10-11",
+  "block": "12.5.152",
+  "name": "mm-wg152-1791730354586",
+  "cases": [
+    {
+      "method": "POST",
+      "path": "/wireguard/interfaces",
+      "status": 201
+    },
+    {
+      "method": "POST",
+      "path": "/wireguard/interfaces",
+      "status": 201
+    }
+  ],
+  "pings": []
+}
@@ -0,0 +1,49 @@
+{
+  "date": "2026-10-11",
+  "block": "12.5.152",
+  "name": "mm-wg152-1791730354586",
+  "devices": [
+    {
+      "serverId": 1,
+      "host": "194.226.121.150",
+      "version": "7.24.5 (stable)",
+      "reachable": true
+    },
+    {
+      "serverId": 2,
+      "host": "104.165.244.7",
+      "version": "7.24.5 (stable)",
+      "reachable": true
+    }
+  ],
+  "cleanup": [
+    {
+      "serverId": 1,
+      "/interface/wireguard/peers": true,
+      "/interface/wireguard": true,
+      "/ip/address": true,
+      "/ipv6/address": true,
+      "/ip/route": true,
+      "/ipv6/route": true,
+      "/ip/firewall/filter": true,
+      "/ip/firewall/nat": true,
+      "/ipv6/firewall/filter": true
+    },
+    {
+      "serverId": 2,
+      "/interface/wireguard/peers": true,
+      "/interface/wireguard": true,
+      "/ip/address": true,
+      "/ipv6/address": true,
+      "/ip/route": true,
+      "/ipv6/route": true,
+      "/ip/firewall/filter": true,
+      "/ip/firewall/nat": true,
+      "/ipv6/firewall/filter": true
+    }
+  ],
+  "childExit": 1,
+  "error": "Child failed: inspect private log\n\n1 !== 0\n",
+  "databaseRemoved": true,
+  "passed": false
+}
@@ -0,0 +1,48 @@
+{
+  "date": "2026-10-11",
+  "block": "12.5.152",
+  "name": "mm-wg152-1791731017548",
+  "devices": [
+    {
+      "serverId": 1,
+      "host": "194.226.121.150",
+      "version": "7.24.5 (stable)",
+      "reachable": true
+    },
+    {
+      "serverId": 2,
+      "host": "104.165.244.7",
+      "version": "7.24.5 (stable)",
+      "reachable": true
+    }
+  ],
+  "cleanup": [
+    {
+      "serverId": 1,
+      "/interface/wireguard/peers": true,
+      "/interface/wireguard": true,
+      "/ip/address": true,
+      "/ipv6/address": true,
+      "/ip/route": true,
+      "/ipv6/route": true,
+      "/ip/firewall/filter": true,
+      "/ip/firewall/nat": true,
+      "/ipv6/firewall/filter": true
+    },
+    {
+      "serverId": 2,
+      "/interface/wireguard/peers": true,
+      "/interface/wireguard": true,
+      "/ip/address": true,
+      "/ipv6/address": true,
+      "/ip/route": true,
+      "/ipv6/route": true,
+      "/ip/firewall/filter": true,
+      "/ip/firewall/nat": true,
+      "/ipv6/firewall/filter": true
+    }
+  ],
+  "childExit": 0,
+  "databaseRemoved": true,
+  "passed": true
+}
@@ -0,0 +1,49 @@
+{
+  "date": "2026-10-11",
+  "block": "12.5.152",
+  "runtime": {
+    "backend": "ux-wg152",
+    "frontend": "ux-wg152"
+  },
+  "cases": [
+    {
+      "width": 1440,
+      "status": 200,
+      "api": [
+        {
+          "path": "/api/servers",
+          "status": 200
+        },
+        {
+          "path": "/api/wireguard",
+          "status": 200
+        }
+      ],
+      "pageErrors": [],
+      "noOverflow": true,
+      "ipv6AddressHint": true
+    },
+    {
+      "width": 320,
+      "status": 200,
+      "api": [
+        {
+          "path": "/api/servers",
+          "status": 200
+        },
+        {
+          "path": "/api/wireguard",
+          "status": 200
+        }
+      ],
+      "pageErrors": [],
+      "noOverflow": true,
+      "ipv6AddressHint": true
+    }
+  ],
+  "bounds": [
+    "Read-only live catalog/new-form UI smoke after native cleanup; no deployed UI mutation",
+    "Native real RouterOS mutations/history/SQL accepted via dedicated database with production Fastify handlers",
+    "IPv6 ULA inner over IPv4 WireGuard outer; no IPv6 outer/independent WAN/throughput/scale claim"
+  ]
+}